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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/09/2003 


nice femal 

Sconni—-nanbe 
Being advised o 
nature of the interview, [ _|Jprovided the following information: 


riends due to their respective interés in-depth knowledge of _ Z 
computers. bo -5,6 
b7C -5,6 
Lamo wouldP and the two 
were always playing with electroni ts and spending time on 

the com Although Lamo eee her computer at @; 
rae she was unaware if Lamo effected any unauthorized 
intrusions and_would be surprised if he did during that particular 


time frame. ee saw Lamo after they 


[___|eesczibes Lamo as soft spoken, extremely smart, D6 —6 
very knowledgeable concerning computers, strange at times, and b7C -6 
having issues with authority figures. Lamo was difficult to figure 

out at times and was somewhat tough to get to know. 


Lamo and 
departed the area. 


recalls that after graduating, 
on_a_ trip and stopped by 
To surprise, Lamo 
Sitting at a computer inl __] when he walked in. To be -5,6 
EL dneuledge, that was the last time | saw Lamo. b7c -5,6 


in an attempt to locate Lamo. 


lon_ occasion and at one point even 
which appear e 


Although she did not know of his eget act 
recently, she did not think he was a good in 


-2 
Investigation on _ 10/08/2003 | | -1,5,6 
-1,5,6 


a | 


This document contains neither recommendations nor conclusions of the FBL. It is the property of the FBI and is loaned to your agency; 
it and its contents are not to be distributed outside your agency. 
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] e 
»,FD-302a (Rev. 10-6-95) $ 


b3 -2 

: b7C -6 

: : bIE -3 
Continuation of FD-302 of a —22 =f »On 10/08/2003 __, Page 2 

onP® 5,6 


does_not_know the exact time frame, but at i ea iae 
hey[7 and Lamo had al BIC. 528 
does not know the specifics amas | consider € two 


| close after they departed. Lamo and spoke infrequently and 
she does not know the context of the conversations. 


[ __laes not know any details pertaining to Lamo's bo -6 
illegal intrusions into different company computer systems other bic -6 


than what she has recently learned from the internet regarding 
postings on Lamo. 


[ __]eoes not know where Lamo has been residing nor 

where he haS_worked or how he has obtained financial support. ae 

Other ehan[ (does not know of any personal friends b6 -5,6 

Lamo may have or past. b7c -5,6 
Other than[ =i does not know how Lamo 


accessed the internety 


=e had visited several weeks _ago and the two 

explored many web sites that pertained to Lamo. a | b6 -5,6 
heard about the recent activity and alleged intrusions by Lamo. b7C -5,6 
However, it was not until they researched the various sites that " 
they realized how extensive Lamo's activity_was. discovered 


a_web site purporting to be that of Lamo's 


or message posting 
. computer experience and knowledge 
is very limited and she seldom goes "on-line". 


Other than this Peas eee 2 sae never bo -5,6 
communicated with Lamo via é-mail and she does not know what, if b7C -5,6 


any, screen names Lamo may utilize. 


called her on 10/06/2003 and advised her 
that he had been interviewed by agents from the Federal Bureau of 
Investigation. He also indicated that Lamo had apparently turned 
himself in to authorities. 


recalls that CJ names were} 
specifically recalls that Lamo 


bo -5,6 
b7C -5,6 


FBI(19-cv-1495)-602 


; © . 


* FD-30 10-69 ; 
; 2a (Rev. 10-6-95) b3 -2 
b6 -6 
b7C -6 


7 a 


A list of names and associates of Lamo's was reviewed; 
however, [aia not recognize or personally know anyone on the 
list. 


TE attempted to_locate Lamo other than on the 
internet Wi e assistance | rT not_know 

how to contact L ould she know who to go through. 

does not believel Jaa any separate means of communicating 

with Lamo and did no mow where Lamo was residing. b6 -5,6 


FBI(19-cv-1495)-603 


Rev. 01-31-2003) 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Dates 10/15/2003 
me meres ue ee 
5A b3 -2 
From: Honolulu . be -1 
Squad 8 b7c -1 


Contact: SS a | b7E -3 
approved py: [___Y 
Drafted By: LL. ss—é oD 


Title: ADRIAN LAMO; 
: New York Times - Victim; 
Computer Intrusion; 
00: NY b3 -2 


Synopsis: To cover lead set by New York via EC dated 07/02/2003. IC -5.6 
-5, 


Enclosure(s): D-302, dated 10/09/2003; 
FD-302, dated 10/09/2003; 
FD-302, dated 10/08/2003. : 


information of New York Office, on 09/08/2003, 
i i account number] b6 -5,6 


On_ 10/09/2003, b7c -5,6 
was_interviewed in| 


land. 
date of birth[ was interviewed 1 
| Co tise that 28-5 
he had con: Z telephonica , tor the purpose of p7Cc -5 


However, further 


inquiries regarding his contact with Lamo must first be approved 
| py the b3 -2 


iter contacted b6 -5 
for regarding the interview of b7C -5 
vised writer that is bIE -3 


provided additional protection under the Bill of Rights 
regarding the disclosure of information pe 
[L___ ]Ja@iso advised that a Department of J 


AUD 


APR 2 5 2004 } 


SERIALIZED. 


YPAD/ASSIGN/COTEESD > 


259 pjo ofvee FBI(19-cv-1495)-604 


4 % . , 


To: New York From: Honolulu 
Re: [| (10/15/2003 


alleviate any obstacles inD sid providing information 
regarding Adrian Lamo. 


Writer informed[___] to contact the Case Agent, SA 
be itectly in order to expedite the interview of 


work telephone number is be -5 
. : b7C -5 
Refer to enclosed FD-302's for further information on DIE -1 


respective interviews. 
Honolulu considers this lead covered and requests New 


York Division_to set an additional lead to Honolulu if further 
contact with _—si| iss desired, along with the needed subpoena. 


| 
2 
FBI(19-cv-1495)-605 


To: @ roe b3 -2 
Re: 10/15/2003 b7E -3 


LEAD(s): 
Set Lead 1: (Action) 
NEW YORK 


AT NEW YORK, NEW YORK 


Honolulu considers this lead covered and requests New 
York Division to set an additional lead to Honolulu if further 
contact with[ is desired, along with the needed subpoena. 
bad 
bo -5 
b7IC -5 


FBI(19-cv-1495)-606 


eee sm tat 


4 ALL INF: WED 
EEREIN IS UM 


@ b6 -1 


b7¢c -1 


FD-302 (Rev. 10-6.95) 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/06/2003 


was interviewed at his residence, 
After being 


advised of the identity of the interviewing agent, 
voluntarily provided the following information; 


rovided by NY office). has had a 16 with 
and thought 


possibly the photograph could resemble one of them. 


Lis not familiar with the Internet service 
Lexis/Nexus, nor has he ever used it for any type of research. b7c -5 


lived with_at 
He lived there with 
no other roommates. While living at 


worked for! SSSCS~S~C*is Qrttwed in 

At that time, [ses a local ISP out of Santa be -5 
Monica, CA, although he could not recall the name of the ISP. p7¢e -5 
did not have a static IP address through this ISP. 


Erom 


worked for 


He states ac_GuUring Ts employment, - 
there were several occasions when the|__jcomputer was hacked be -5 
into. tated that he expended a significant amount of b7c -5 
time and effort in trying to identify the hacker, but was 


ultimately unsuccessful in doing so. The hacker went by the name 
(1 not suffer any direct economic loss_as_a result 
of the hack and it appeared the hacker was using the[__]eomputers 
a that he thinks someone from the FBI 
May have been involved in this investigation. 
Lae be 
and he is currently 


pecializes in 
Wi. and other "hi-Ttéc companies in| 
currently uses the local ISP, The Rive 


his current residence since b6 -5 
is anc -5 
i employment 


Investigation on 10/03/2003 a Tucson, Az 
: 
i 

mel om one Ho jgesppto? $004, 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI a 
it and its contents are not to be distributed outside your agency. 
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b7E -3 
cone Dane : a? Bag see Page 
At that time, he used a > aI Cable Modem. When 


Signed up for this service, he used the nam qian he 

was also required to provide his social security number and his -5 
previous place_of employment, which was at 2, ae address in ae -5] 
Los Angeles. ea is aware that Cox was somehow involved with 

the company excite@home because at one point, Cox's homepage 

provided some information in that regard. hinks if may 


be possible that when Lamo gained acc he excite@home site, 
he may have obtained information abou 


out _of convenience because he 


LC duses his computer primarily for Email and be -5 
research. He does not frequent "hacker" sites on the Internet, norp,j7c -5 
does he chat. has never posted any information to the web 


site securityfocus.com. 


At the conclusion of the interview, [eas served D3 -l 
with a Grand Jury subpoena. bo -5 
DIC. 5 
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b7¢ -1 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 10/07/2003 
b6 -1 
From: Phoenix BAC a1 
Squad 12/Tucson_ RA bIE -3 
Contact: SA at 
Approved By: [7] 
Drafted By: mn 
Case ID #: 


Title: ADRIAN LAMO; 
New York Times-Victim; 
Computer Intrusion; 
00: NY 
Synopsis: To report results of investigation in Tucson, Arizona. 


b7E -3 


Enclosure(s): Enclosed for New York are the following: 


1. The original and one co; of an FD-302 
documenting the interview off —____]éatea (_ fe -5 


10/06/2003. 7c 
2. An FD-340 dated 10/03/2003 containing the 

original interview notes of 

etaite:; [dag interviewed xegarding 6 -5 

= knowledge he has of the subject in the above titled case. 7c -5 


denies any knowledge of Adrian Lamo and did not 
recognize the photograph of Lamo when shown. [_____—sidis::«unable 
to explain how Lamo would have am personal 
information. 7 


il correspondence between sal lena SA 
was advised that he is excuse rom responding 
re) ie Grand Jury subpoena he received. 


The Phoenix division considers this lead 


bad 


FBI(19-cv-1495)-609 


ALL INFORMATION TCNTAINED 


EEREIN 23 0 
2010 us be -1 
D302 Rey, 10-6.95) Cc] hepa 
a: 
FEDERAL BUREAU OF INVESTIGATION 
Date of transoription 10/17/2003 
beo25 
b7C -5S 
5 
was interviewed at Seattle, Washington. After being ivi = the 
interviewing Agents and the purpose of the interview, 
provided the following information: 
also _known as rk boa 
b7Cc -5S 


loyment with 


does not know ADRIAN LAMO and does not recognize b6 -5 
his photograph. believes the name[C™~—C'S b7c -5 
familiar, but is unable to remember why. ‘ 


-2 
-1 
DiGsa2 
a, A bIE -3 
Investigation on 10/16/2003 a Seattle, Washington 
File Date dictated 10/17/2003 
SA 
by SA 


This document contains neither recommendations nor conclusions of the FBI, It is the property of the FBI and is loaned to your agency: 
it and its contents are not to be distributed outside your agency. 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 10/20/2003 


To: New York oe | 
Squad DT-5 


From: Seattle 
Squad 11 b3) =2 


Contact: sa [UT b6 -1 
reoroves ys [id Be 7 
Drafted By: [7 eh 


Title: ADRIAN LAMO; 
New York Times-Victim; 
Computer Intrusion; 
oo :NY 


Synopsis: New York to receive original and one copy of interview 

ee aE b3 -2 
————— bre = 
ererence: b7c -5 


Enclosure(s): Original and one copy of interview FD-302 off DIE #5 


Details: Seattle Division received _a_lead from New York to 

interview and is b6 -5 
also known as was interviewe yy Special p7c -5 
Agents of the Seattle Division on October 16, 2003. 


Seattle Division considers this lead covered. 


b3 -2 
be -1 
bIC -1 
bIE -3 


FBI(19-cv-1495)-611 


ee 


Yo: Prom: Seattle 
Re: 10/20/2003 


LEAD (s) : 
Set Lead 1: {Info} 
NEW YORK 
AT NEW YORK 


Read and clear. 


¢¢293cmh01.ec 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 10/21/2003 


To: New York Attn: SA 
Squad DT-5 


From: Boston 
c-i2 


bé -1- 
approved By: [OT pIc -1 
Drafted By: b7E -3 
Case ID #: 
Title: ADRIAN LAMO; 


NEW YORK TIMES - VICTIM; 
COMPUTER INTRUSION 


Synopsis: To report results of investigation at Boston. 


b7E -3 
Enclosure(s}: Enclosed for New York is an original and one copy 
of an FD-302 for the following individuals: 


1. be -5 


2. bic -5 
3. 


Also enclosed for New York is an FD-340 GA envelope) 
with the original notes from interview of Po 


Details: Per referenced EC, Boston interviewed the below listed 
individuals for information concerning Adrian Lamo, with negative 
results: 
b3 -2 
be -1,5 
b7C -1,5 
bTE -3 


to locate 
SsA[_____] informed SA of the 


attempted contact and was instructed by sa[__jnot to pursue 
additional attempts. 


Boston considers lead covered. 


FBI(19-cv-1495)-613 


To: New York i Boston 
Re: [| 20/21/2003 


LEAD (s): 
Set Lead 1: (Action) 
NEW YORK 
AT NEW YORK, NY 


Read and clear. 


7 


b3 -2 
BIE -3 


FBI(19-cv-1495)-614 


mn 
FD-302 (Rev. 10-6.95) 


ok 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/01/2003 
be -5 


social securit: 
was 


interviewed telephonically. After being advised of the identity of 
the interviewing agent and the purpose of the interview, | 
provided the following information 


the FEDERAL BUREAU OF INVESTIGATION. 


i -2 

| b6 -1 

apR 252008 jf] poe 
: i bIE -3 


Investigation on 10/01/2003 at Boston, Massachusetts {telephonically) 


2 nace 10/02/2003 PS ~? 
be -1 


vy SA b7c -1 


bIE -3 


This document contains neither recommendations nor conclUsions of the FBI. It is the property of the FBI and is loaned to your agency; 


it and its contents are not to be distributed outside your agency. FBI(19-cv-1495)-617 DIS. TROY, for 


CCUTRINES 
STFIED 


ch: 


e 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/01/2003 


eerept wag interviewed 
fephonically. After being advised of thé identity_of the 
interviewing agent and the purpose of the interview, 
provided the following information: 


L_dnaa no knowledge of 


listed on the questionnaire provided by 
the FEDERAL BUREAU OF INVESTIGATION. 


O-of the individuals 
c 


the New York Division of b6é -5 


@ 


b7IC -5 


Investigation on 10/01/2003. a Boston, Massachusetts SNE etepidicaliy) Ib3 -2 
i _ 

File Date dictat fy APRY Qo au j os c t 1 

ry =. 3b : io TE -3 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; 


it and ils contents are not to be distributed outside your agency. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/01/2003 


After being advised of the identity_of the 
interviewing agent and the purpose of the interview, 
provided the following information 


assing inf] HS 
fo fesuta not remember b/C -5 
the conference and who had sponsored it. 
stated that he only conversed with LAMO_for a few moments and could 
not recall what they had spoken about.[____——sidWstated that he had 
no specific personal knowledge of LAMO other than what was 
publically available through published media. 


ecognized three names listed on the 66. <5 
questionnaire provided by the New York Division of the FEDERAL BY. 
BUREAU OF INVESTIGATION. b7C -5 


had known was bo -5 


considered| 


had known) land had 
been interviewed a number of times by regarding computer a 
security topics. be —5 
BIC eS 
[seg tectines the request to provide his social 
security number or date of birth. 
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DIE -3 


09/12/2003 
CAH:cah 


SAL___—siwas telephonicgily.contacted by sl sd bé -l, 
(Sacramento Office) who stated tha: ADRIADLAMO turned himself into the United States b7C “> Pas) 
Marshal's on 9/9/2003. LAMO was‘presentéd-before the judge and was released on $250,000 
bond secured by $100,000 signe: ordered to not touch computers and ordered to 


report to the FBI's New York field office at 9:00 AM on Thursday, 9/11/2003. The US Marshal's 
were to arrange transportation for LAMO. 


On 9/11/2003, writer telephonically contacted the US Marshal's in Sacramento, California , 
to verify LAMO's flight information as he did not arrive to the FBI's New York Office at 9:00AM Ch 
as ordered by the judge in Sacramento. The US Marshal's stated that LAMO boarded a flight 

from Sacramento, CA to San Francisco, CA on 9/10/2003 at 8:00 PM. The flight arrived San 

Francisco at 8:39PM. The US Marshal's booked LAMO on a direct United Flight from San 

Francisco to JFK airport in New York that left San Francisco at 10:10 PM and arrived 6:31 AM. 
Investigation revealed that LAMO rescheduled his flight with no explanation to another flight that 

left San Francisco 11:20 PM with a connection through Chicago, IL to Laguardia airport (LAG) 

in New York. This flight arrived at LAG at 10:10AM. 


On 9/11/2003, LAMO's public defender in New York telephonically contacted the SA 
(“het 12:30 PM stating that LAMO had just arrived in their offices. When LAMO arrived at b6 -1 
LAG airport he met with a reporter before reporting as ordered to the FBI office. Pictures taken b7c -1 
by the reporter during this interview are attached. 
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Declan McCulla 
Photographs 


HIGHLIGHTS: 

adrian lamo in court 

bsa ceo software summit 
fee's michael powell 
insects ang flowers 


LIST 


themes 
locations 
alphabetical (ong) 


aspen in summer most recent 

big sur: highlights home page 

big sur: suc 

big sur: esaten institute BACKGROUND 


big sur: elephant seais 


Decian McCullagh is a journalist, 
big sur: hearst castle 


programmer, and photographer. 


iui en pose 
burning man dancers adrian-lamo-airport 

ofp: portraits Adrian Lamo, the so-called homeless —_mccutiagh bio 

ofp: portraits (more) hacker, on pay phone after arriving at  2tlact_mecullagh 
ofp: potitech reception LaGuardia airport for his court date 


photo licensing 


de snowstorm: downtown mecullagh family site 


de snowstorm: adams morgan 
death valley dunes 
duke university 


politech mailing list 
Tech, paiitics, opinion 


yekeulture 
duke university gardens. Parahistory from 1899 


fourth of july fireworks 
gibraltar: highlights 
gibraltar: cave 

gozo: highlights 
9029: ggantiia temple 
istanbul: blue mosque 


istanbul: bosphorous strait 
istanbul: cistern 


istanbul: hagie sofia _ adrian-lamo-portrait 

istanbul: topkapi palace Adrian Lamo, the so-called homeless 
istanbul {all images) hacker, before his court appearance on two 
malta: highlights criminal charges 


monterey jellyfish 
morocco: tannery 
morocco: tangier 
morocce: fez 
morocoo: fez medina 
moscow: city at night 
moscow: red square 
Moscow: arhat street 
moscow: st. dasil's 
moscow: general 

mnt. rainier 

national 200: cats 
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adrian-lamo-sep03 photos -- cd mecullagh photographs e@ 


national z00: panda b&w adrian-lamo-unhappy 

night Adrian Lamo, the so-called homeless 
Playa del fuego : hacker, before his court appearance on two 
playa det fuego: burn criminal charges 


playa del fuego: pavilion 
playa del fuego: camps 
politech dinner 

rock & roll quitar exhibit 

san francisco at night 
september 41 

yosemite national park 
yosemite national park (b&w) 
4ds: holocaust museum 

1ds: washington monument 
ids: winter images 

SEARCH PHOTO DESCRIPTIONS 


FL SEARCT adrian-lamo-arrest-warrant 


JOIN POLITEGH MAILING LIST Adrian Lamo, the so-called homeless 


JOIN hacker, with a copy of the signed warrant 


for his arrest on two criminal charges 


adrian-lamo-cab 
Adrian Lamo, the so-called homeless 
hacker, in taxi on way from airport to 
surrender himself to FBI 


adrian-lamo-new-york 
Adrian Lamo, the so-called homeless 


hitp://www.mccullagh.org/theme/adrian-lamo-sep03.htm! 
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* + adrian-lamo-sep03 photos -- ® mecullagh photographs 


hacker, on city street outside his public 
defender's office 


adrian-lamo-public-defender 
Adrian Lamo, the so-called homeless 
hacker, in his public defender's office 


adrian-lamo-courthouse 
Adrian Lamo, the so-called homeless 
hacker in dark jacket, outside of U.S. 
District Courthouse (background, right) 
before his court appearance on two 
criminal charges, accompanied by an 
official from the public defender's office 


a 
ae 
i HY 


adrian-lamo-fbi-1 
Adrian Lamo, the so-called homeless 
hacker in dark jacket, about to enter FBI 
offices in lower Manhattan to surrender 
himself on two criminal charges, 
accompanied by an official from the public 
defender's office 
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Adrian Lamo, the so-called homeless 
hacker in dark jacket, about to enter FBI 
offices in lower Manhattan to surrender 
himself on two criminal charges, 
accompanied by an official from the public 
defender's office 


A text-only version of this list is also 
available. 


photagraphs and text copyright © 1989-2003 by declan meculiagh. all rights reserved, privacy. licensing information. 
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(Rev. 01-31-2003) 


Precedence: ROUTINE Pie Date: 10/20/2003 
b6 -1 
From: San Francisco Ib G: tak 


Squad 14B/ b7E -3 
Contact: 
approves bys (rd 


Drafted By: 


Case ID #; 


Title: ADRIAN LAMO; 
New York Times-Victim; 
Computer Intrusion; 
OO :NY 


Synopsis: ument telcal between sas[_—sdand a a 


on 10/14/2003. 


by7G: =i 
ahead: [ ah = we 


Details: On 10/14/2003, sa[___ confirmed with | that 
Lamo may be entering a plea agreement with prosecutors. 
Therefore, the interview leads in the above referenced ECs may 
+ not be necessary. It was agreed upon that the San Francisco 
interviews would be placed on hold until further notified by the ‘ 
NY office. bo -1 


. b7C -1 


On 10/14/2003, SAL _|communicated to SAs in San 
Francisco assigned to conduct the interviews to hold from 
conducting the interviews until further notified. 


TROEED: 


ED, 
£0. FLED. 


SERIALZ 


b6 -1 
Jie BPR 2 5 2004 b7c -1 
DIE -3 
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To: New York From: San Francisco 
Re: [) 40/20/2003 


LEAD (s) : 
Set Lead 1: (Info) 
NEW YORK 
AT NEW YORK 


Read and Clear 


+. 
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CONTAINED 


e 8b 
; (Rev, 01-31-2003) , ; b7c -1 
FEDERAL BUREAU OF INVESTIGATION. 
Precedence: ROUTINE Date: 10/17/2003 
To: New York Attn: Squad _DT-5 
A, 
From: Atlanta , on 
Squad 017 


Drafted By: 


Case ID #: 

Title: ADRIAN LAMO; ae 
NEW YORK TIMES - VICTIM; QP 
COMPUTER INTRUSION 


Synopsis: To provide results of lead set for Atlanta to contact 
CNN legal personnel. 


Details: Per communication dated 07/02/2003, the Atlanta 
Division was asked to contact CNN legal personnel regarding 
possible contact from the above-captioned subject. Communication 
dated 08/07/2003 requested that the interview be delayed until 
further notice. A Groupwise E-mail message directed to writer on 
09/05/2003 indicated that the lead interview need not be further 


delayed. 
On_ 10/07/2003, SA spoke with] i b6é -1,5 
at advise a Se Ore a5: 
never worke: z previously worked at the law firm 


o a current CNN b3 -2 
Lo whe handles b6 -1,5 
spoke with] pie rl 


b7E -3 


other CNN personnel had ever beén Contacted by ADRIAN LAMO, 
particularly regarding LAMO’s computer intrusion activities. 


[Jindicated that he queried the_appropriate CNN personnel 
and no such contact was discovered. [| further indicated 


that a more in-depth or formal response “Sey 


7 ann 


God 


4268 
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To: New ; Atlanta @ b3 2 
Re:* 10/17/2003 bIE -3 


records and/or e-mail archives) would require appropriate legal 
process. 


Accordingly, Atlanta considers this lead covered. 


FBI(19-cv-1495)-631 


Atlanta © 


To: New y. i 
Re:" 10/17/2003 


LEAD (s): 
Set Lead 1: (Info) 
NEW _YORK 
AT NEW YORK 


Read and clear. 


+ 


b3 -2 
b7E -30 
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eo. r b3 -2 


rp-sb20 Rev. 10-6-95) f ih 


f b6é -5 
b7c -5 
bIE -3 


Ld 


added that he is [eros be 5 
lowever, he has not ever hacked into computers betore, Qos a 


jor was he aware of any Lexis/Nexus database. He has also not had b7C -5 
contact with any of the names provided by FBI New York. 


who has access to the amily computer. She also has no D6 -5 


knowledge of any aspect related to this investigation. 72 
b7c -5 


AS a result,[____ was not served an appearance 
subpoena, forwarded by New York, which would have required him to 
appear before a Grand Jury in New York. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/13/2003 


account number 
residential telephone number 


Interviewed. After being advised of the 
interviewing Agent and the nature of the investigation, 
provided the following: 


He confirmed that his birth date was not 66 °=5 
Hi tymed that his social security account number was pIC _5 
not He provided a copy of his California Driver's 7-5 


License and Social Security Card. 
confirmed that he has lived at the following 
addresses: 


However, he has not lived at the following address: 


i | 


oct asked if he had any knowledge of ADRIAN LAMO. Benes 
He knew LAMO only from what he had heard through the media. He 2 

did not know the answers to any of the additional questions bic -5 
provided by New York Special Agents (SA) of the Federal Bureau of 


Investigation (FBI). 


California 


Investigation on 09/23/2003 a Chico, 


File # 


by 


This document contains neither recommendations nor conclusions of the FBI, It is the property of the FBI 
it and its contents are not to be distributed outside your agency. £y 

are, OZ. 
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(Rev. 01-312008) HEREIN IS 
ATE G2-2 Coe b6 -1 
on FEDERAL BUREAU OF INVESTIGATION .  bIC -1 
| Precedence: ROUTINE Date: 10/16/2003 
: To: New York Attn: SA [sisSY b3 -2 
| : b6 -1 
From: Sacramento b7c -1 


Chico RA 


Approved By: [7 


Drafted By: ctc 
Case ID #: 


Title: ADRIAN LAMO; 
New York Times-Victim; 
Computer Intrusion; b3 -2 
OO :NY be -5 
i . . IC -5 
Synopsis: Lead covered. | located and interviewed <¢ 
with negative results. Federal Grand Jury Subpoena not served?’ DIE -3 


Enclosure(s): Enclosed for New York_are one FD-302, and two 

copies, documenting interview Pe copies of b6 -5 
(a ibizeh certificate, driver's license, and social security ,7c -5 
card; responses to individual background questions, as 


Beovided =e New York; and brief statement by 


Details: On 09/23/2003, bo -5 
social security account number] bic -5 
[| telephone nunber 
interviewed. 
confirmed that he has lived at , be -S 
and b7c -5 
However, he has not lived at 


id not know any information concerning Adrian 
Lamo, other than what he has seen and heard on television and in 
the newspapers. He also did not know any of the other names of 
interest identified by New York. He is not a computer hacker and 
did not know of a Lexis/Nexus database. He had no idea as to how 
New York could have identified him as being associated in any way 
with the Lamo investigation. 


FBI(19-cv-1495)-635 


@ 


= Sacramento : 
Re: 10/16/2003 b7E -3 


mentioned that he has 


who is possibly in the area of 
elieved that Cees could have been born around 


Therefore, [was not served with a Federal Grand 
Jury Subpoena, as provided by New York. 


On 09/23/2003, the Chico Police Departmen, be -5 
contacted regarding their department's contact a The b7Cc -5 
only record of contact on file within their departmént_was an 
a OS 
b6é -5 
was contacted with negative b7c -5 
results. Later contact was made withl He provided 


acopy of [—sdbirth certificate and a brief written 
statement regarding another family member who might be 
responsible for the theft of poet identity. Both are 
enclosed. 


on 10/14/2003[______—sdJ submitted typed responses to the 
individual background questions, provided by New York. Those 
responses also enclosed. 


Descriptive Data: 


Main Subject 
Name - be -5 
Last: b7Cc -5 
First: 
Middle: 

Race: 

Sex: 

DOB: 

POB: 

DLN: 

soc: 

Address(es) - 
House #: 
Street Name: 
Street Suffix: 


Be 


City: Chico 
State: California 
Phone #: 
Employer: 
ISP: Sunset .net 
2 


FBI(19-cv-1495)-636 


To: New York From: Sacramento 
re: [10/16/2003 


LEAD ({s): 
Set Lead 1: (Info) 
NEW _ YORK 
AT NEW YORK 


For your information. Read and 


+ 


b3 -2 
b7E -3 


clear. 


| 
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Rev. 01-31-2003) 
. FEDERAL BUREAU OF INVESTIGATION ae 
Precedence: ROUTINE Date: 10/24/2003 
To: New York Attn: 5S 7 
a b3 -2 
bé -1 
a b7c -1y 
From: Albuquerque ae 
Squad 12 ea 3 
Comtagt: SA 


Approved By 
Drafted By: tc 


Case ID #: 


Title: ADRIAN LAMO; : (x) b3 -2 


NEW YORK TIMES - VICTIM; ~ b6 -5 
cous INTRUSION; eh = prc -5 
5 b7E -3 


—— To provide the results of the interview old 


merercnee : i = > = 


Enclosure(s): One (1) original_and one (1) covy of the FD-302 
documenting the interview of 


Details: On 10/23/2003 was interviewed relative to b6 -5 
captioned matter. advised that she was not able to b7c -5 
provided detailed Information relative to ADRIAN LAMO, his 

associates, capabilities, due in part to the fact that she had 
never talked to, interviewed and/or contacted LAMO via electronic 


mail. 


had 


b3 -2 
be -1 

| b7C -1 
bIE -3 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/10/2003 


ADRIAN LAMO, Date of Birth (DOB) 2/20/1981, turned 
himself into the interviewing agents at 26 Federal Plaza, New York, 
NY 10278 at 2:00PM on 9/11/2003. 


LAMO was processed and at the end of processing at 2:34pm 
stated he felt ill. The nurse at 26 Federal Plaza, NY, NY was 
immediately contacted by the interviewing agents. The nurse 
arrived and made arrangements for LAMO to be examined by a doctor 
at the NYU Downtown Hospital, Emergency Department. LAMO was 
transported by the interviewing agents to the_NYU_ Downtown 
Hospital. Upon arrival LAMO was treated byl ——————.__—SCd ho. s&bG 
stated that LAMO needed serious dental work and referred him to a b7c 
dental clinic as well as provided him with ibuprofen. 
medically cleared LAMO for transport to the US Marshal's. 


The interviewing agents and LAMO arrived at the US 
Marshal's Southern District of New York at 4:32 PM for processing. 
Entry by the US Marshal's was denied because they stop all intakes 
at 4:30 PM. 


At 5:25 PM, LAMO was turned over to the custody of the 
Public Defenders Office with the understanding he was to return to 
court the next morning for processing by the US Marshal's. 


The following was obtained through interview and 


observation: 
NAME: ADRIAN LAMO 
DOB: 2/20/1981 
PLACE OF BIRTH: Boston, Massachuetts 
ADDRESS: 3506 Lynnmar Way 
Carmichael, CA 95608 
TELEPHONE: 916-944-1669 
SEX: Male 
RACE: White 
BYES: Hazel 
HEIGHT: 51g" 
WEIGHT: 130 
SOCIAL SECURITY NO: 042-74-6804 
OTHER: Education level, GED 
Investigation on 09/11/2003 at New York, NY 
File # Date dictated 09/11/2003 b3 -2 
SA b6é -1 
ty SA b7c -1 
b7E -3 
This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agenoy; 
it and its contents are not to be distributed outside your agency. 
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FEDERAL BUREAU OF INVESTIGATION, 


Date of transcription 10 /15 {2003 


being advised the identity of the interviewing agents, 


provided the fol..swing information: 


8 was 
been a student at bo -6 
@id not have any p7c -6 


on computer networks. 


[___] mternet Service Provider was Southwestern bo “6 
Bell, which he used for wireless Internet access through his laptop b7C -6 
computer. sitting in the floor next to him 


during the interview. later used the laptop to search 
for some information abou amo, Chat was saved on the hard drive. 


did not consider himself to be a hacker, but be -6 
rather a who was very knowledgeable about bIC -6 
computers. 


[| net Lamo, when he was. 
The two met in San Francisco at 
was located at 


ad worked at 
described the 


and Lamo was 


ocacion as a 


Lamo was very knowledgeable with IBM's and with DOS and 3 ~2 
the Windows software. lLamo was very low key and did not seem to b6é 


draw a lot of attention to himself. Lamo's cell phone number was 76 . 
415-505-HACK (4225) . personally spoke with Lamo bic -1,6 
approximatelL ut they talked on the telephone b7E -3 
BY st Giese t eng. fF 
R 
NY . . . TY 
Investigation on 10/06/2003 at St. Louis, Missouri SEARCHED. INOEXC)____— 
SERIALIZED FILED —— 
File # Date dictated §=10474/2003 
SA saw 
by SA 
28 > 
This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loane 


it and its contents are not to be distributed outside your agency. 
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b3 -2 
6 -6 


LBS) 


about used instant messenger to 6 -6 
correspond with Lamo abou! 7C -6 


Lamo's whereabouts were unknown tL id Lamo had 
worked for three years in a computer lab for a company called 
Lyric, a nonprofit organization in California. 


didn't know any of Lamo's friends or 6 -6 


acquai: es. Lamo did have a steady girlfriend at one time, but b7C -6 
could not provide any information about her. 


Lamo utilized Kinko's copy stores for some of his 
internet access. Lamo never uged[t. = feampueers never 


stayed with him or used his telephone. 


Lamo's e-mail addresses were adrian@adrian.org and 
darklord@darkthrone net. Lamo's AOL screen names were as follows: 


lonehax0r, lordofflies, lordoffiles, lordofrings, 
matrixsecurityteam, aolmagus, arcanebittergeekgo, linetrace, 
subversive, tomammiano and truefaith. 


was not sure why 
Lamo was homeless or if he had any type o ethics that he 
lived by. 


b6 -5,6 

[ie not have any information about how Lamo y7c “5 6 
was getting Financial support to live on. didn't know J 
that Lamo had been in contact with 
so he didn't have any knowledge about whether Lamo received any 
money from t was aware that Lamo had been 
contacted by not sure if the two ever met. 

[ee ried ae never been with Lamo when he was 
performing any hacking activities or scanning networks to attack, 
however, he did know that Lamo used a Toshiba laptop computer, 
running Windows 98 Operating System. 


[was not aware of any freelance work that Lamo 56 00 
had been doing. amo had only attended one 2600 meeting(computer b7C -6 


hacker/enthusiast_club) in San Francisco, but was not impressed by 
the meeting. 2600 meetings. 
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b6é -6 
3 

a never provided any screen shots from b6 
networks a amo nad hacked. He did remember a screen shot beingb7C 


sent to him from it had nothing to do with network 
vulnerabilities. | kept up with newspaper articles about 


Lamo and some of his intrusion activity. 


was not aware, if anyone had ever ran his name - 
in Lexis/Nexus. He was never given any type of access or password b6 -6 


to that database. ee also not familiar if Lamo had b7C -6 
provided any of his Friends or associates with user ID's and 

passwords to gain access to Lexis/Nexus database that he had hacked 

into. 


recognized was 


a asked if he could provide any information 
ee eee only individual that 


had worked for 
California, when he was about 


Lamo graduated from Lowell High School, which was an 
advanced academic institution for gifted students. Lamo tested out 
a year early from high school. 


Lamo had written his own version of DOS(Disc Operating 
System) used with Microsoft Windows and had also learned Assembler 
programing language. 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 10/27/2003 


To: New York Attn: Squad _DT-5 
SA 


From: St. Louis 
Squad 3 


contact: sal b3 -2 
b6 -l1 


Title: ADRIAN LAMO; ‘ 
New York Times-Victim; CE 
to 


Computer Intrusion; 


oo :NY 
Synopsis: Report results of interview off id by the b3 “2 
St. Louis Division. bo -6 


b7C -6 


Enclosure(s): Enclosed for the New York Division are 
original and one copy of FD-302 interview of 
one 1-A envelope containing notes from interview. 


Details: On August 6, 2003, the St. Louis Division received a . 
lead to intervi about Adrian Lamo. The lead be -6 . 


requested that not be interviewed until Adrian Lamo b7C -6 
was taken into custody. Lamo was arrested in September 2003. 


On October 15, 2003, SA's 


bo -1,6 
b7C -1,6 
telephone 

cell). 


Adrian_Lamo_in San Francisco, California pg -6¢ , 
which described as a p7c -6 


isCit 


FBI(19-cv-1495)-644 


prem ]10/27/2003 


Tox New York From: St. Louis -3 


a kept in contact with Lamo through the be —6 . 
years, but didn’t know any specific information about Lamo b7C -6 
especially any information about computer intrusions. LC] 

had kept up with Lamo’s exploits through the news media. 


vided Lamo’s cell phone number (415) 505- b6 -6 
HACK (4225), knew that Lamo was using a three year old 6 - . 
laptop with Windows operating system, but couldn’t provide any D7C -6 


information about specific targets of Lamo. 


[ae ot tae 
when he lived_in San Francisco. [___—s—s—sifwas born inl Ss 


ang] vas Bom 


The list of questions provi interview by the . 
New York Division were reviewed wit The_onl erson b6 -6 
that[ | knew wast who also worked atl in b7C -6 


San Francisco. 


i rovide Lamo’s e-mail addresses and . 
screen names. usually corresponded with Lamo be -6 . 
utilizing instant messenger. b7IC -6 


The St. Louis Division considers this lead covered. 
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Tox > 6St. Louis 
vy Recs 10/27/2003 
LEAD (s): 


Set Lead I: (Info) 
NEW YORK 


AT NEW YORK, NEW YORK 


Read and clear. 


bad 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/10/2003 
date of birth of 


address_of Ibé -5 
home phone of b7c -5 
as interviewed on 10 . After being advised of the 


identity of the interviewing agent and the purpose of the interview 
provided the following information: 


white female 


al of b6 -5 
has never heard of ADRIAN LAMO, does not recognize his p7c -5 
photograph, and does_not_know LAMO's family. oe home phone 2 


number is listed as[__ Jin the phone book and receives phone 
calls from her fans with some frequency. [___]does not recall 
receiving any calls from LAMO or any of an unusual nature. 


[utilizes email and cannot recall receiving any email ey 
messages from LAMO or any other unusual messages. [| also did 
not recognize any of the names presented to her. bé -5 


: b7IC -5 
LC Joelieves that LAMO may ———————l 
and may be interested in her background for av reason. 


Investigation on 10/10/2003 a Williams Bay, Wisconsin 


File # Date dictated 10/10/2003 
ty §. 
This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; 


it and its contents are not to be distributed outside your agency. 


FBI(19-cv-1495)-647 


FD-302 (Rev. 10-6-95) 
DATE 02 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/24/2003 


ERNEST GARY GYGAX, also known as, GARY GYGAX, male, 
white, date of birth of 07/27/38, social security number of 387-34- 
8291, address of 316 Madison St., Lake Geneva, Wisconsin 53147, 
home phone of 262-248-73 was interviewed on 1072472003. After 
Being -auvisee-or tie identity of the interviewing agent and the 
purpose of the interview GYGAX provided the following information: 


GYGAX writes popular fantasy novels and creates fantasy 
games as a profession. GYGAX was one of the creators of the 
"DUNGEONS AND DRAGONS" fantasy game franchise. GYGAX has never 
heard of ADRIAN LAMO, and did not recognize his picture, however 
GYGAX has heard of LAMO's nickname, the Homeless Hacker. GYGAX 
does not recall receiving any calls from LAMO or any of an unusual 


nature. 

GYGAX utilizes email and cannot recall receiving any { 
email messages from LAMO or any other unusual messages. GYGAX also 
did not recognize any of the names presented to him. raat 


GYGAX believes that LAMO may be a fan of his games, or 
read one of his books and may be interested in his background for 
that reason. 


Notes of interview were placed into a 1A and are being maintained 
with the file. 


IGEXED. 


FILED. 


af APR 3 0 0005 


= yuk 


f »7 Jnas Oh 20d Re y 


SeAUALi2ED 


Investigation on 10/24/2003 a Lake Geneva, Wisconsin p7c -1 
File # Date dictated 10/24/2003 DIE -3 
by SA 

‘This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; 


it and its contents are not to be distributed outside your agency. 


FBI(19-cv-1495)-648 


(Rev. 01-31-2003), 


~~ Syriopsis: 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Dates 10/24/2003 


to: / New York acens sa 
Squad DT-5 


From: Milwaukee 


Squad 8 
Contact: SA b3 -2 
be -1 
Drafted By: ms DIE TG 


Case ID #: 


Title: ADRIAN LAMO; 


New York Times-Victim; 
Computer Intrusion; 


The purpose of this communication is to report results 
of investigation at Milwaukee. 


Enclosure(s): Enclosed for New York are: b3 -2 
1) Two_copies of an FD302 documenting the interview b6 -5 
of b7c -5 
2) Two copies of an FD302 documenting the interview of bIE -3 
Gary Gygax : 


3) One 1A containing the interview notes Co | 

4) One 1A containing the interview notes of Gary Gygax 
Details: As a result of the referenced EC and email dated be -5 
09/05/2003 Milwaukee interviewed LJwas not b7c -5 
familiar with the subject of the Investigation. 

As a result of the referenced EC and email dated 
09/05/2003 Milwaukee interviewed Gary Gygax. Gygax was not 
familiar with the subject of the investigation. 


Milwaukee considers all leads at Milwaukee completed. 


the yaseyen oni 


FBI(19-cv-1495)-649 


To: MN ; Milwaukee 
Re: 10/24/2003 


LEAD (s): 
Set Lead 1: (Info) 
NEW YORK 
AT NEW YORK 


Read and clear. 


+ 


b3 -2 
BIE -3 


FBI(19-cv-1495)-650 


FD-302 (Rev. 106-95) 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10 /2 2/2003 


social 


date of birth, 
address of 
home telephone number 
work telephone number was advised of the 
official id i the interviewing agent and the purpose of the 
interview. fo lene provided the following information: 


= ee that she r b6 -5 
stated above: ex prior address was b7C —5 


DY ] stated that she has never heard the name Adrian b6 -5 
riter then articulated a few details regarding Lamo. p7¢e -5 
then stated that she might have heard the name Lamo from a 

news broadcast, but she maintained she has never had any 

communication or contact with Lamo of any kind. . 


7 CL Jstatea that in June, 2003, her Chase Master Card 
number was stolen and used to purchase approximately $600.00 worth bé6 -5 
of items_in North Carolina at Nordstoms, CVS and Krispy Creme Donut pyc -5 
stores. [ _—siibecame aware of the use of her card_when Chase e 
contacted her regarding the unusual transactions. [__|stated 
that her credit card number was most likely stolen on the internet, 
since she does a lot of shopping on-line with that card. 


that_she uses two internet accounts, be -5 


| , SERULIZ 


Investigation on 10/22/03 a New Haven, Connecticut 

File # Date dictated 10/22/03 

by SA 

‘This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; 


it and its contents are not to be distributed outside your agency. 


FBI(19-cv-1495)-653 


INFIEMATICN © 


LASS. 


TTRINES 


FD-302 (Rev, 10-6-95) 


-1- 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/30/2003 


date of birth, 
address of 
telephone number was 


advised of the official peste sh the interviewing agent and the 


purpose of the interview. 
information: 


then provided the following 


stated that he does not know a person named 
Adrian Lamo and has never heard of that name. 


(L-**Jadvised that he is aL ____ Jana does not_use the 


computer very much. CL |stated that he and his wife, 
a do use the computer for banking and shopping on 
ancernec. 


Lo Jetatea that he has never been contacted by Lamo 
and has never had any contact with Lamo of any kind. 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to’ your agency; 
it and its contents are not to be distributed outside your agency. 


b6é -5 
b7C -5 


b6 -5 
bic -5 


be -5 
b7IC -5 


: 


Lo 
Investigation on 10/30/03 at New Haven, Connecticut (telephonically) b3 -2 
| owe denne 30/20/02 b6 1 

bIC -1 
oe bTE -3 


FBI(19-cv-1495)-654 


2 OR 


(Rev. 01-31-2003) 


LEAD/AssiGN COVERED 


R 3 U26{O# 


b6 -1 
: brie 1 
FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 10/30/2003 


To: New York Attn: Squa i 
‘ SA 


From: New Haven : 
Squad 10 : b3 -2 | 


Contacts sa J ae 
b7c -1 


Title: ADRIAN LAMO; 
New York Times - Vicitm; 
Computer Intrusion; 
OO: NY 


Synopsis: New Haven considers this lead covered. 


Enclosure(s): Original and one copy ofL__] Fp-302 with 1-A be -5 
envelope containing interview notes. Original and one copy of b7e —5 
[C |ep-302 with 1-A envelope containing interview notes. 


Details: On October 22, 2003, writer con 
and on October 30, 2003, writer contacted 
regarding Lamo. Neither or 
information regarding Lamd. 


provided any 


New Haven considers this lead covered. 


b3 =2 

bee = 1" 
IC al 
bIE -3 


303dc02.ec 


SeRRUED_ FED, 


dal 2 6 eed 


© 
PRPS 


FBI(19-cv-1495)-655 


To: > New Haven on | 
Re: 10/30/2003 b7E -3 


. 


LEAD (s) : 
Set Lead 1: (Info) 
NEW YORK 
AT NEW YORK 


Read and clear. 


+ 


FBI(19-cv-1495)-656 


BEREIN I. 
DRIE oO 


‘ e@ @ @ @  ai9-.0-1495)-657 


\ 
FD-302 Rev. 10:6-95) 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/22/2003 


white female, date of birth bo -5 


Social Security Number (SSN) b7c -5 
a | telephone number was interviewed at 


her residence. After being advised of the identity of the 
interviewing Agent and the purpose of the interview, 
voluntarily furnished the following information: 


[has resided at her current addr 
approximately 


ss for 


number was. did this as she had credit problems_and could 
not _get_ service in her own_name. advised that 
po Teas born on provided a Social 


indicating a Social 


shared the apartment with 
for approminately L————~Jhas 


nd is currently residing at an unknown location, 
possibly in Virginia. 

[SE evised that she has never_heard of ADRIAN LAMO ps5 —5 
or anyone_else involved in computer hacking. stated that p7c -5 
the only she knows_is never “ 
discussed LAMO and doubted if knew him or ever 
talked to him. 


Document Initials | Date 


Investigation on 10/22/2003 a Victoria, Texas A sot ; 


a? Sef ton UE - 
wy _ $a [OT Tene BTC =1 


al “DIE -3 


the property of the FBI and is loaned to your agency; 


FBI(19-cv-1495)-658 


This document ¢ 
it and its-cont 


poe 
"Rev. 04-31-2003) be -1 
b7Cc -1 
FEDERAL BUREAU OF INVESTIGATION 
Precedence: ROUTINE, Date: 10/22/2003 
To: New York Attn: Squad DT-5 
SA 
From: Houston 
Victoria RA b3) =2 
Contact: SA b6 -l 
TE 1, 
Approved By: as =3 
Drafted By: 
Case ID # 
Title: ADRIAN LAMO; 
New York Times-Victim; 
Computer Intrusion; 
. OO:NY 
Synopsis: Coverage of lead by Houston Division, Victoria RA 
4 b3 -2 
Enclosure(s): Enclosed for New York are ne b6 -5 
copy of an FD-302 reflecting interview of DIC Se 
=o 
Details: On 10/22 was interviewed at b7E -3 
Texas. ng Lamo or having an 
nowledge of _his activities. i i 
as 
telephone service a 
erm ame due to credit problems. The details 
of this interview are contained in the enclosed FD-302.- 
As no further investigation remains, Houston considers 
this lead covered. 
b3 -2 
be -1 
SEARCHED, z T bIC -1 
SERIALIZED. FILED DIE -3 
APR 2 5 2004 
YORK Document [Initials] Date | 
OK to Upload fay 
(Uploaded by 
Serial # 


i 
FBI(19-cv-1495)-659 


oo ® 


To: 2 
re: [| 10/22/2003 
LEAD (s) : 


Set Lead 1: (Action) 


+ 


NEW YORK 


AT NEW YORK, NEW YORK 


Read and clear. 


b3 -2 
bike 3 


| 
FBI(19-cv-1495)-660 ! 


To: New York Attn: Squad DT-5 


From: Seattle 


’ Squad 11/Northwest Cyber Task Force 
contacts) Det.[ Bowel ay 
bYC =L, 7 
Approved sy: [[—————1] BoE os 


Drafted 
Case ID 


Title: 


Synopsis: Negative result of attempt to locate and interview 

emeneeees | : b3 2 
Dewea3: 

reference: [| bic =3 


Details: 


referenced Portland Division request, are negative. Seattle will 
continue to attempt to locate and ineelenE 
captioned investigation, and will advise New York accordingly. 


Precedence: ROUTINE Date: 11/03/2003 


14S OLED 
: oF 


SA 


b3 -2 


py: Lew a 


ADRIAN LAMO 

NEW YORK TIMES - VICTIM; 
COMPUTER INTRUSION; 
OO:NY 


Attempts to locate and interview] ——s—s—Cw*~—“C;*~C*di’CW es the DVE -3 


concerning the 


af 5} 2.6 Bed 


FBt— NEW YORK 


FBI(19-cv-1495)-662_ 


To: New York mc Seattle @ 


Re: (11/03/2003 b3 
b7E 


LEAD (s): 
Set Lead 1: (Info) 
NEW YORK 


AT NEW YORK, NEW YORK 


For information. 


Aad 
307gafecd1 


FBI(19-cv-1495)-663 
=. a, i 


ro sQ@ b3 -2 


FBI- NWCCTF b6 -1,3,7 
b7c -1,3,7 
FROM Det, bIE -3 


SPD Fraud - NWCCTF 
SUBJECT CASEID ee Request to interview. from Portland Field Office 
bo -1,3 
ssl] b7C -1,3 
Per you instructions, 1 was tasked with attempting to locate and interviewL___ IL __lis a 


possible witness in the New York Field Office’s investigation of the “Homeless Hacker.” This request was 
originally sent to the Portland Field Office and has been referred to Seattle sincel ast. known address 
is if 

Here is a summary of my efforts to date: 

10-16-03 Assigned request 


10-17-03 Tealled the NY Agent Co per request on lead. Ileft her a message. No response 
» from SAL [1 assume that she still requests that [Fre interviewed. 


10-21-03 I checked with Postal Taspecer[__one verified that{____is getting mail at the 


address in| 
10-22-03 I mailed a contact letter to} advising him that he is a witness and asking him to contact 
me. No response fro: b6 -1,3 
.b7C -1,3 


10-30-03 Idid a phone number search fof___—id None located. 


10-30-03 T responded to______ apartment Fe | left my business card on his door 


with a request that he call me for an interview. 


As of this date I have had no contact wihD sd I will continue my attempts to contact him for the 
interview if directed by you. Otherwise, please consider this my up-date and I request that this information be 


senttoSA[ Jn New York. 


Respectfully, 


SEARCHED 
SERIALIZED. 


INDEXED 
Fic€O 


b3 -2 
be -7 
b7C -7 
b7E -3 


FORM 1.11 CS 21.20 REVISED 7/99 
Decumentt 10/81/2003 6:12 AM 


FBI(19-cv-1495)-664 


ad 


(Rev, 01-31-2003) 


Precedence: ROUTINE Date: 09/19/2003 
To: New York : Attn: Squad_DT-5 
SA 
_AS@attle . tn: Computer Intrusion Unit 


From: Portland 
Sq 4 
Contact: safe) 


approved sy: [7 


Drafted By: [Inert 


Case ID #: 

Title: ADRIAN LAMO; 
New York Times - Victim; 
Computer Intrusion; 
OO: NY 


Synopsis: To cover and set lead. 
Enclosures (s}: Enclosed for Seattle is one co of referenced 
EC with accompanying documents pertaining i 


Details: Referenced communication set forth a lead _(#18) for 


Portland to conduct logical interview of [—Ss————C—CCTCC_ 
[atten being aavised oF 
the arrest of Adrian Lamo. 


Referenced E-mail from SA 9/5/03, b6 
advised of Lamo's wanted status and go ahead to conduct b7c 
interviews. On 9/19/03, an attempt was made to contact and 


and 


that] _——siihad lost his job in According to 


Ld 
[t—“(;i‘C*Csi‘*diCESC #NN J nanchs moe out OF his apartment in|] 


SEARCHED ———— INDEXED —__ 
SERIALIZED. FILED 


To: New York ; Portland 2 
Re: 09/19/2003 b3 - 


b7E -3 
LEAD (s)} 
SEATTLE 
‘AT MOUNTLAKE TERRACE: 
Locate _and_ interview b6 -3 
using suggested interview p7c -3 


questions included in referenced, attached NY EC. 


FBI(19-cv-1495)-666 


ALL INFORMATION CONTAINED 


@® City of Seattle 


b6é -1 
biG HL 
. Gregory J. Nickels, Mayor 
Seattle Police Department 
R. Gil Kerlikowske, Chief of Police 
/ Ove g. os 
bé -3 
b7C -3 
Re: Seattle Police Incident No. - 
deaf] 
The Seattle Police Department is investigating a report of an offense in which you are 
named as a Witness. 
Please contact the below named individual as soon as possible regarding this matter and 
refer to the Seattle Police Incident Number referenced above. 
Please contact: Detective a a a 7 
io a 
Fraud, Forgery and Financial Exploitation Squad 
Sincerely, 
R. Gil Kerlikowske 
Chief of Police 
b6 -7 
Special Assignments Unit bIc -7 


ATT iff 


@ 
Seattle Police Department, 610 Fifth Avenue, Seattle, WA 98104-2305 


An equal employment opportunity, affirmative action employer. Accommodations for people with disabilities provided upon request. 


Call (206) 233-7203 at least two weeks in advance. 


oD mn 


FBI(19-cv-1495)-675 


Full Name: 


Last Name: 

First Name: 

Business Address: b6 -1,3 ; 
bIC-=1L73 


DOB: 


oF 


FBI(i9-cv-1495)-680 


8 « 


Ld No Subject 
To 
From: S, 


Subject: 
Ce: 

Bee: 
Attached: 


be -1 
b7C -1 
Printed for S, 7 


FBI(19-cv-1495)-691 


: PD-4 (Revised 14/99 A 
x SA her: 


OREGON SID # 
4 


ae p32 
EXT: ee 
meer bIC -1 
_ DEADLINE: ee 


FBI(19-cv-1495)-694 


¥ 


*  yRel. 01-91-2003) 


q# r 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 07/02/2003 

To: Detroit Attn: Computer Intrusions Unit 

. Sacramento 
Washington Field 
Cincinnati ALL INFORMATION ’ 
Memphis ’ EEREIN 13 UNCLA: : 


New Haven 
San Francisco - 


. Los Angeles 


Baltimore 

Philadelphia ! 
Houston } 
Cleveland . 
Oklahoma City 

Newark 

Seattle 

San Diego 
Indianapolis 


wrortl and + 


From: 


Omaha 
Milwaukee 
Little Rock 
Miami 
Jacksonville 
Chicago 
Springfield 
Minneapolis 
Honolulu 
Boston 

Las Vegas 
Denver 
Dallas 
Atlanta 
Cyber 


New York 
Squad DT-5 


DATE 12-27-2010 


Beproved ny: [dE 


Case 


Title: 


ID #; 


ADRIAN LAMO; 


New York Times-Victim; 


oT. 

jest 
< 

a 
an 
e 
ioe 
aS 
© 
a 

aoe 
“J 
on 


sty e 
To: Detroit From: New Yo! . 


kes [en] 07/02/2002 


Computer Intrusion; b3 -2 
00:NY b7E -2,3 


Synopsis: Conduct logical interviews 


Enclosure(s): Packet containing, —~—~—SCSd ACS checks, 
criminal history, DMV history and Internet checks 
on each interviewee 


Copy of article from sfweekly.com of recent 
interview of the subject, ADRIAN LAMO 


List of suggested interview questions for each 
interviewee (Suggested questions worksheet) 


Photograph of ADRIAN LAMO 


Details: ADRIAN LAMO is a twenty two (22) year old male who commits 
unauthorized computer intrusions into major corporations. LAMO is 
labeled in the media as the “homeless hacker". He considers himself a 
"white hat hacker", Investigation by the New York Office has revealed 
that LAMO is a "black hat hacker", an individual who breaks into a 
computer system with the purpose of inflicting damage or stealing 
data. Each time LAMO hacks a major corporation he alerts friends in 
the media first and has them contact the victim for comment. 


In September 2001, LAMO hacked YAHOO! and rewrote the text 
of a YAHOO! News article. LAMO gained access through the portal's b6 -5 
web-based production tools and modified a news story about DMITRY ,7¢ -5 
SKLYAROV, a Russian computer programmer facing federal criminal 
charges. LAMO used a free internet connection at KINKOS to commit the 
hack. YAHOO! was informed of the breach after being contacted by 
lof securityfocus.com, who was contacted by LAMO. 

as convicted in 1990's by the FBI for committing unauthorized 

computer intrusions. 


In October 2001, LAMO contacted the 
newsbytes.com to inform him that he had gained unauthorized access 
into a MICROSOFT customer service database. LAMO had gained access to 
MICROSOFT's database is September 2001 but choose not to disclose his 
access until October 2001. LAMO utilized a vulnerability in 
MICROSOFT's network that allowed an unpublished Internet Protocol (IP) 
address to be entered into a web browser. The IP address provided 
access to records of people who had bought products and services from 
MICROSOFT. L___]contacted MICROSOFT to ask them for a comment for 
the story he was writing about the hack. This was the first instance, 
MICROSOFT learned of the intrusion. MICROSOFT confirmed the hack and 
described the incident as 


be -2,5 
bic -2,5 


FBI(19-cv-1495)-712 


ce aoe SS | 
To: Detroit From: New Yo | 


re: [07/02/2003 b3 -2 


"an error that led to a breach of privacy, against our privacy 


policy". Be. 25 


er 2001, LAMO contacted the eer — DTC? os 
to inform him that he had gaine 


Unauthorized access into MCL WORLDCOM's internal network. LAMO gained 
access to WORLDCOM's internal network in October 2001 but choose not 
to disclose his access until December 2001. LAMO provided internal 
screen captures to WORLDCOM to prove he was the hacker. The screen 
captures from WORLDCOM's internal network state, "Not to be reproduced 
in any manner or disclosed to unauthorized individuals". LAMO gained 
access to WORLDCOM's internal network using a free internet connection 
at KINKOS. LAMO exploited a vulnerability in a WORLDCOM proxy server 
to gain unauthorized access to their network. After committing the 
hack and reporting it to[____] LAMO commented "The downside is, I'm 
running out of major US Corporations". Also, one of LAMO's prized 
possessions is a screen capture of WORLDCOM's stock price falling 
after he announced he had hacked the company. 


In February 2002, LAMO contacted a =5 
newsbytes.com to inform him that he had gained unauthorized access b7C -5 
into SBC COMMUNICATIONS. LAMO gained access to SBC COMMUNICATIONS 
network in December 2001 but choose not to disclose his access until 
February 2002. LAMO utilized an exploit to gain access to SBC's 
internal network. LAMO used a free internet connection at KINKO's to 


perform the hack. LAMO gained access to usernames, passwords, 
telephone numbers, addresses and other sensitive customer information. 


In February 2002, LAMO discovered several misconfigured b6 -5 

proxy servers acting as doorways between the public Internet and they jo -5 

ivate intranet. LAMO contacted[__ of 

to inform him that he had gained unauthorized access 
into The NEW YORK TIMES intranet. LAMO utilized the proxy servers to 
gain access to the NEW YORK TIMES network. Once on the network, LAMO 
cracked a password for a userid with supervisor rights. Utilizing 
this userid he was able to broaden his access as well as perform 
certain functions within the network. LAMO created four (4) 
Lexis/Nexus accounts off of the NEW YORK TIMES intranet and utilized 
these accounts for himself and/or friends to run over 3,000 searches, 
Of individuals, address and/or court documents 


LAMO has committed other computer intrusions into several 
other corporations such as AOL and EXCITE@HOME. Each time LAMO 
commits a computer intrusion on a high profile organization he reports 
the vunerability and intrusion to the media causing a distrust of the 
company's clients. The above mentioned corporations have lost 
significant money and trust of their clients. 


FBI(19-cv-1495)-713 


Be os e 4 r 
. To: Detroit From: New ¥ e 


Re: [—«s«£0'7/02/2003 b3 -2. 


In the enclosed San Francisco Weekly article, dated April 
16, 2003, LAMO states "he is preparing to announce, in a few days, 
weeks or months -- whenever he decides the time is right -- his 
biggest hack yet. On the record, he defines‘his target as a 
"critical-infrastructure-related company"; off the record, he exhibits 
ample evidence of his repeated incursions into the corporations 
internal system." NYO believes that LAMO is a threat to the 
infrastructure of the United States. 


The NYO along with the Southern District of New York (SDNY) 
are currently completing a complaint charging LAMO with his 
unauthorized access into WORLDCOM, NEW YORK TIMES, LEXIS/NEXUS, SBC 
COMMUNICATIONS and MICROSOFT. The NYO and the SDNY will have the 
complaint completed the week of July 7, 2003. The NYO will_charge his 
other hacks upon indictment. oe 


friends or in hostels for lodging. LAMO makes money in the ber 
security field when i i 
residence at] 

LAMO keeps in contact with we 


Upon his arrest, the NYO has identified five (5) groups of 
individual who need to be interviewed regarding LAMO. In total, 
approximately 225 individuals will be interviewed. The groups are as 

~~ follows: 


1. Individuals he contacts via telephone - 
. Individuals he has close relationships with (Will 
be providing Grand Jury subpoenas) 
3, Individuals that were run in Lexis/Nexus 
A Individuals whose IP addresses were used to run 
unauthorized Lexis/Nexus searches (Will be 
providing Grand Jury subpoenas) 
© Individuals he is friends with but are reporters. 
(We are currently obtaining Department of Justice 
approval to conduct these interviews) 


This communication is to address the individuals with whom 
LAMO and/or others performed unauthorized Lexis/Nexus checks obtaining 
pérsonnel information over a year ago and/or individuals LAMO 
contacted telephonically. Please note, when interviewing these 
individuals investigation may reveal a friend, acquaintance, family 
member or themselves, not LAMO who performéd the Lexis/Nexus checks. 
TF this is determined, conduct logical interview about that particular 
individual. Also, interviewees may and/or may not be aware that their 
personnel information was obtained by unauthorized individuals through 
Texis/Nexus, please handle discretely. Writer has enclosed a list of 


FBI(19-cv-1495)-714 


8 eK 
. To: i . New x 4 @ 


: ; b7E -3 


individuals who may have been provided with the Lexis/Nexus userids by 
LAMO (included in the list of "other names" in suggested questions 
worksheet) . 


i 
The NYO has conucted[|___] checks. criminal history b7E =) 
checks, DMV checks, ACS checks and internet checks’ on all the 


individuals writer is requesting to be interviewed. Writer has put 
details pertaining to each interviewee in the leads section of this 
communication. Writer requests to be contacted by Agents who are 
assigned to conduct interviews either by telephone or email. The 
purpose of this request is to allow writer to contact the appropriate 
Agent to inform them of LAMO's arrest, so that interviews can be 
conducted. . 


Interviews pertaining to individuals he has close 
relationships with, individuals whose IP addresses were used to run 
unauthorized Lexis/Nexus searches and individuals he is friends with 
but are reporters will be sent under a separate lead. The NYO office 
is currently obtaining Federal Grand Jury subpoenas and Department of 
Justice approvals for these individuals. 


FBI(19-cv-1495)-715 


a av | 


New x 4 


07/02/2003 


Set Lead 1: (Action) 
DETROIT 


AT CLINTON TOWNSHIP, MICHIGAN ; BE-25 
: b7C -5 
after being informed i 


w Of 
of LAMO's arrest by writer. 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


DETROIT 


AT CLINTON TOWNSHIP, MICHIGAN b6 & 
DEG--=5 
after being informed 


Conduct logical interview of 
of LAMO's arrest by writer. 


Before interview ig conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


DETROIT 


AT LANSING, MICHIGAN 


of 
after peing b6 -5 
informed of LAMO's arrest by writer. pyc -5 
—3 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


DETROIT 
AT GOODELLS, MICHIGAN 


Conduct logical interview a el 
ens] after being informed 0 ESFTEET EY he 5 


writer 2 
: bIC. SS: 


Before interview is conducted, contact writer with name of 


eee) be assigned to conduct logical interview of 


Set Lead 2: (Action) 


FBI(19-cv-1495)-716 


‘ <4 ad 

To: i x, New Yo: . @ 

Re: Cc 07/02/2003 b3 -2 
: b7E -3 


SACRAMENTO 


AT CARMICHAEL, CALIFORNIA 


ical interview of| 
telep 
of LAMO's arrest by writer. 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


after being informed p7¢ -5 
£ ADRIAN LAMO. 


SACRAMENTO 


AT CARMICHAEL, CALIFORNIA 


Conduct logical inter 
1 teleph eing imiormed h7C -5 
[os S arres yy writer. lof ADRIAN LAMOC. 

Before interview is conducted, contact writer wi e of 
Agent who will be assigned to conduct logical interview of 


SACRAMENTO 
AT CLOVIS, CAULTFORNIA 


i interview of beé -5 
telephone after being b7c -5 
inLormed o S arres 


by writer. 


Before interview is conducted, contact writer with name of 
Agent who will be assigned -to conduct logical interview of| 


SACRAMENTO 


AT CARMICHAEL, CALIFORNIA 


interview of 


writer. 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of| 


SACRAMENTO 


AT MERCED, CALIFORNIA 


FBI(19-cv-1495)-717 


& « a @ 2 
To: Detroit From: New Yo. @ 


Re: [_] 07/02/2003 b3 -2 
; bIE -3 


ae cl ay | 
after being informed of LAMO's arrest 


by writer. 
b6é -5 


Before interview is conducted, contact writer with name ef bIc -5 


ne who will be assigned to conduct logical interview of 


SACRAMENTO 


AT MERCED, CALTFORNIA 


logical interview of[______ | 
after being informed of LAMO's arrest 
y writer. be -5 


b7C 5 


Before interview is conducted, contact writer with name of 
cas who will be assigned to conduct logical interview of 
SACRAMENTO 


AT CITRUS HEIGHTS, CALIFORNIA 


Conduct logical interview off _____] 
after being informed of LAMO's 
arrest by writer. has criminal history. b6 -5 


A . : 3 C25 
Before interview is conducted, contact writer with name of?! 2 
Agent who will be assigned to conduct logical interview of 


SACRAMENTO 


AT NORTH SAN JUAN, CALIFORNIA 


Conduct logical interview of b6 -5 
telephone p7c -5 
afttex being informed o S arrest Dy writer. 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview o 


SACRAMENTO 
AT EXETER, CALIFORNIA 


exview of be -5 
telephone b7C -5 


of LAMO's arrest by writer. 


FBI(19-cv-1495)-718 


: 


: 4 a y 
@ b3 -2 
To: Detroit From: New Yo 


pes [17/02/2003 


Before interview is conducted, contact writer wi of 
Agent who will be assigned to conduct logical interview of 


SACRAMENTO 


AT EXETER, CALIFORNIA 
SF bé -5 


logical i: 
telephone 
eing informed of LAMO's arrest by writer. 
bIC -5 


Before interview is conducted, contact writer with_name of 
Agent who will be assigned to conduct logical interview of 


SACRAMENTO , 


AT DAVIS, CAL[FORNIA 


Conduct logical intervi 

telephone 

after being informed of LAMO's arrest by writer. 
history. 


b7c -5 
as a criminal 


Before interview is conducted, contact writer with_name of 
Agent who will be assigned to conduct logical interview of 
SACRAMENTO 


AT WEST SACRAMENTO, CALIFORNIA 


Conduct logical interview of 

telephone a@tter b7C -5 

being informed of LAMO's arrest by writer. LAMO's phone records showb7F -1 
he called above mentioned telephone number. 


Before interview is conducted, contact writer’ with name of 
Agent who will be assigned to conduct logical interview of 


SACRAMENTO 


AT WEST SACRAMENTO, CALIFORNIA 


i interview of 
telephone after bé -5 
ing informed of LAMO's arrest by writer. LAMO's phone records show 


he called above mentioned telephone number. 7BO-5 
b7E -1 
Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


FBI(19-cv-1495)-719 


: Pr “ a 
. To: i 1 New & e b3 -2 
Re: 07/02/2003 bIE -3 


SACRAMENTO 


AP ELK GROVE, CALIFORNIA 


after being informed o Ss arres ¥ 
b 


H 
writer. -5t 


6 
7 -5 
Before interview is conducted, contact writer.with_name of : 
Agent who will be assigned to conduct logical interview off sd , 
SACRAMENTO 


AT ELK GROVE, CALIFORNIA 


deat intents ot[ ———_—],,_, 
after being informed of LAMO'S 2 
arrest by writer. . bIC -5 


Before interview is conducted, contact writer with_name of 
Agent who will be assigned to conduct logical interview of 


SACRAMENTO 
AT ELK GROVE, CALIFORNIA 


conduct losical interview of[ 
writer, 


b6 -5 
bic -5 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


SACRAMENTO 
AT VISALIA, CALIFORNIA 


*_ Conduc’ ogical interview of 
telephone alter being 
informed of LAMO's arrest by writer. LAMO'™s phone records show he 


called above mentioned telephone number. 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


b6 -5 
SACRAMENTO b7c -5 
AT EXETER, CALIFORNIA DIE —1 


10 


FBI(19-cv-1495)-720 


New & 


07/02/2003 


logical interview of 

telephone after being informe 
LAMO'S arrest by writer. LAMO's phone records show he called above 
mentioned telephone number. 


Before interview is conducted, contact writer wi e of 
Agent who will be assigned to conduct logical interview of b6 - 


b7c -5 } 
Set Lead 3: (Action) eee 


WASHINGTON FIELD 


AT ARLINGTON, VIRGINIA 


Conduct legical interview of b6é -5 
T celephone number after SING bIC -5 
informed of LAMO'’s arrest by writer. LAMO may stay with him when he 


is in the Washington, DC area. 


Before interview is conducted, contact writer with_name of 
Agent who will be assigned to conduct logical interview of 


WASHINGTON FIELD 


AT ARLINGTON, VIRGINIA 


i ical interview of| 
telephone number after being 
informe: i by writer. LAMO may stay with him when he 
a a 0 


WIE So) 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


WASHINGTON FIELD 
AT_ STERLING, VIRGINIA 


Conduct logical interview of 
telephone number 
atter being informed 3: S arrest by writer. has criminal 


history. bo -5 


biG: =5 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of| 
WASHINGTON FIELD 


il 


FBIC19-cv-1495)-721 


: « # 4 b3 -2| 
- To: Detroit From: New Yo: @ bIE -3 


re: Do] 07/02/2003 


AT ARLINGTON, VIRGINIA 


Conduct logical interview of 
Co telephone nu 


after being informed of LAMO's arr ter. 
who is an alleged hacker. 
a Lexis/Nexus userid. 


be -5 
b7C -5 


may have been given 
Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 
WASHINGTON FIELD 


AT ALEXANDRIA, VIRGINIA 


also known as 


after being informe 
history. 


Before interview is conducted, contact writer with_name of 
Agent who will be assigned to conduct logical interview of 


WASHINGTON FIELD 


AT ALEXANDRIA, VIRGINIA 


ical interview off 
after being informed of LAMO's arrest by 
writer. ay be currently incarcerated. bo -5 


Before interview is conducted, contact writer with name of PIC “5 


Agent who will be assigned to conduct logical interview of 


WASHINGTON FIELD 
AT VIENNA, VIRGINIA 
iew of 


telephone 
i informed of LAMO's arrest by 


writer. ACS was LAMO's phone records show he bo -5 
called above mentioned telephone number. b7C -5 
b7E -1 


Before interview is conducted, contact writer wi of 
Agent who will be assigned to conduct logical interview of 


WASHINGTON FIELD 


12 


FBI(19-cv-1495)-722 


New 2 


07/02/2003 


AT WASHINGTON, DC 


ical interview of 
being informed of LAMO's arrest by writer. 
bo -5 


2 


Before interview is conducted, contact writer with name of bIC -5 
Agent who will be assigned to conduct logical interview of 


WASHINGTON FIELD 
AT VIENNA, VIRGINIA 


Conduct logical interview a 
telephone 


after being informed of LAMO's arrest by writer. All of 
past/present addresses were run in Lexis/Nexus. An 
individual would have to know this information about him to perform 
checks. May have had Lexis/Nexus userid or was known very well by the 
individual who ran his checks. b6 -5 


=5 
Before interview is conducted, contact writer wi bIC -S 
Agent who will be assigned to conduct logical interview of 


WASHINGTON FIELD 


AT VIENNA, VIRGINIA 


ical interview of 
telephone 
fter being informed of LAMO's arrest by writer. A ° 


past/present addresses were run in Lexis/Nexus. An 

individual would have to know this information about her to perform 
checks. May have had Lexis/Nexus userid or was known very well by the 
individual who ran his checks. b6 -5 


b7c -5 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


WASHINGTON FIELD 


AT ALEXANDRIA, VIRGINTA 


ee ud eeteptonel 
telephone after 
being informed of LAMO's arrest by writer. Address is a hotel, LAMO bo -5 


may stay there when he resides in DC. b7c -5 


b7E -1 


13 


FBI(19-cv-1495)-723 


< é 
. ® b3 -2 
To: Detroit From: New Yor! @ bIE -3 


Res De] 07/02/2003 


Before interview ig conducted, contact writer with name of bE <5 
Agent. who will be assigned to conduct logical interview of 2 


DPC: 5 
WASHINGTON FIELD or 
AT FAIRFAX, VIRGINIA 
after being in b6 -5} 
b7C -5 
H 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


WASHINGTON FIELD 
AT MCLEAN, VIRGINIA 


Conduct logical interview of = 
telephone after being bo -S 


y writer. LAMO may stay with him when b7C -5 


InLorme 
residing in| 


Before interview is conducted, contact writer wi of 
Agent who will be assigned to conduct logical interview of 


WASHINGTON FIELD 


AT MCLEAN, ‘VIRGINIA 


telephone after 
being informed_of LAMO's arrest by writer. LAMO may stay with him when 
he resides inl] b6 -5 
BTC =5 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


WASHINGTON PIELD 


AL MCLEAN, VIRGINIA 


ical interview of 
telephone and 
after being informed of LAMO's arrest by writer. aS 


LAMO's phone records show he called above mentione hone be -5 
number(s). LAMO may stay with him when he resides i BLE a5 
b7E -1 


14 


FBI(19-cv-1495)-724 


; a 
| ® ® oe 
To: Detroit From: New Yor! b7E -3 


se: | 97/02/2003 


Before interview is conducted, contact writer wi e of . 
Agent who will be assigned to conduct logical interview of be - 


Set Lead 4: (Action) 
CINCINNATI 

AT LAKEVIEW, OHTO 

Conduct logical interview of| 5 

after being informed of LAMO's arrest by pg -5 


writer. Social Security reports state thay |may be deceased. 47, _5 


Before interview is conducted, contact writer wi e of i 
Agent who will be assigned to conduct logical interview of 


CINCINNATI 


AT DAYTON, OHEO 


logical i i 
telephon alter | 
being informed of LAMO's arrest by writer. LAMO's phone records show 


he called above mentioned telephone number(s). be -5} 
bre 5 

Before interview is conducted, contact writer with_mame of ph7F — 
Agent who will be assigned to conduct logical interview of 


Set Lead 5: (Action) 
MEMPHIS 


AT CORDOVA, TENNESSEE 


Conduct logical interview of 
telephone number 


being info Ts arrest by writer. 
related to 


Lexis/Nexus userid. 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


MEMPHIS 


AT CORDOVA, TENNESSEE 


15 


FBI(19-cv-1495)-725 


: . @ @ b3 -2 
To: Detroit From: New York : 
re: J 07/02/2003 


ical interview of 
telephone numbe 
est by writer. 


may have had b6 -5 
Lexis/Nexus userid. pIc —5 
Before interview is conducted, contact writer wi £ 
Agent who will be assigned to conduct logical interview of 
MEMPHIS 
AT CORDOVA, TENNESSEE 
iew of 
telephone numbe 
after bein writer. is 
related to may have had a 
Lexis/Nexus Useri bo -5 
b7G-=5 
Before interview is conducted, contact writer wi name of 
Agent who will be assigned to conduct logical interview of 
Set Lead 6: (Action) 
NEW HAVEN e 
AT CANTON, CONNETTCUT 
i rview of| 
after being informed 
of LAMO's arrest by writer. b6 -5 
: b?IC =5 
Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 
NEW HAVEN 
AT GREENWICH, CONNETICUT 
after being informed of LAMO'’s arrest by writer. Se 
=5 


Before interview is conducted, contact writer with name ofp7C -5 
Agent who will be assigned to conduct logical interview of 


Set Lead 7: (Action) 


SAN FRANCISCO 


16 


FBI(19-cv-1495)-726 


Ne A eh 


New 2 e b3 2 


To: Detroit From: 
re: [+]: 07/02/2003 


AIT SAN FRANCISCO, CALIFORNIA 
CP ccicchone noner 
telephone number 
informed o: t by writer. 
related to 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of| 


iS 
He is 
bo -5 
b7C -5 


SAN FRANCISCO 


AT SAN FRANCISCO, CALL FORNIA { 


{ 
icp interview of| eee JT 

being informed o: Ss arres a 
writer. He is related to b6 -5 


OG 
Before interview ‘is conducted, contact writer with name of bIC -5 
Agent who will be assigned to conduct logical interview of 


SAN FRANCISCO 


AT SAN FRANCISCO, CALIFORNIA 


telephone after being informed of LAMO's arrest 
by writer. LAMO's phone records show he called above mentioned b6 -5 
telephone number(s) . b7c -5 


Before interview is conducted, contact writer with_name of DIE 
Agent who will be assigned to conduct logical interview of 


SAN FRANCISCO 


AT PLEASANT HILL, CALIFORNIA 


after being informed of LAMO's arrest 


by writer. b6 -5 
eet 


Before interview is conducted, contact writer with name o. 
Agent who will be assigned to conduct logical interview of 


SAN FRANCISCO 


AT PLEASANT HILL, CALIFORNIA 


17 


FBI(19-cv-1495)-727 


———— a i _ Pet ee sl ae ap a) SS he FF 


. “ b3 -2| 
To: i : New 5.2 e bIE -3 
ge; DY 99702/2000 


lew of 
after being informed of LAMO's arrest 
by writer. LAMO's phone records show he called above mentioned 


| 
telephone number(s). b6 -5] 
. b7c -5 
Before interview is conducted, contact writer with _name of 
Agent who will be assigned to conduct logical interview of 
SAN FRANCISCO 
AT LIVERMORE, CALIFORNIA 
Conduct logical interview ofL__ 
cO—— ester being informed of LAMO's arrest by 
writer. b6 -5 
. . b7IC -5 
Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 
SAN FRANCISCO 
AT CASTRO VALLEY, CALIFORNIA 
of 
after being informed of LAMO's b6 -5 
arrest by writer. bic -5 


Before interview is conducted, contact writer with _name of 
Agent who will be assigned to conduct logical interview of 


SAN FRANCESCO 
AT SAN FRANCISCO, CALIFORNIA 


Conduct logical interview of ___ 
after being informed of LAMO's arrest 


by writer. is anti- 
hacker and is disliked in the hacker community. Tf requests 
approval from Department of Justice to be interviewed it will be 
obtained and we will interview at that time.[7_ Jlives with 


Before interview is conducted, contact writer wi p7c -5 
Agent who will be assigned to conduct logical interview of 


SAN FRANCISCO 


AT BURLINGAME, CALIFORNIA 


18 


FBI(19-cv-1495)-728 


To: Detroit From: New & 
Re: [97/02/2003 


i interview of bo -5 
telepho: bp7¢ -5 
informed of LAMO's arrest by writer. DIE -1 


LAMO's phone records show he called above mentioned telephone 
er(s). 


Before interview is conducted, contact writer wi ie of 
Agent who will be assigned to conduct logical interview of 
SAN FRANCISCO 


AT BURLINGAME, CALIFORNIA 


Conduct logical interview of 
telephone 
informed of LAMO's arrest by writer. 


LAMO's phone records show he called above mentioned telephone 
number (s).[__ writes stories about 


Before interview is conducted, contact writer wi of 
Agent who will be assigned to conduct logical interview o 


SAN FRANCISCO 
AT SAN FRANCISCO, CALIFORNIA 


Conduct logical interview of [ob -5 
after being informed of LAMO WIC 5 


arrest by writer. 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


SAN FRANCISCO 


AT SAN FRANCISCO, CALIFORNIA 


Conduct legical intervie 
telephone an 
after being informed of LAMO's arrest by writer. b6 -5 


b7C -5 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


SAN FRANCISCO 


AT SAN FRANCISCO, CALIFORNIA 


19 


FBI(19-cv-1495)-729 


: me @ b3 -2 
To: Detroit From: New York e DIE -3 
fe: [07/02/2003 


iew of 6 -S 
after being informed of bIC 
LAMO's arrest by writer. ie 


Lon) 


Before interview is conducted, contact writer with_name of 
Agent who will be assigned to conduct logical interview of 


SAN FRANCISCO 


AT BERKELEY, CALIFORNIA 


Conduct logical interview of 
after bel i xmed of LAMO's arrest by writer. 
is a former employee of ivbien has since gone b6 -5S: 
bankrupt. LAMO's phone records show he called above mentioned bICc - 
telephone number(s). 
Before interview is conducted, contact writer ae | of 


Agent who will be assigned to conduct logical interview of| 


SAN FRANCISCO i 


AT SAN FRANCISCO, CALIFORNIA 


ical interview of 
after being informed of LAMO's arrest by 


writer. 


bE-=5 
b7C -5 

Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


SAN FRANCISCO 


AT SAN FRANCISCO, CALIFORNIA 


Conduct logical interview an rere 
after being informed of LAMO's arrest 
y writer. 


bé -5 
Before interview is conducted, contact writer with name of b7G. —5 
Agent who will be assigned to conduct logical interview of 


SAN FRANCISCO 


AT PLEASANTON, CALIFORNIA 


erview of[ 
after being informed of LAMO's arrest by 
writer. Lives with 


be -S 
DiC 5 


a 


20 


FBI(19-cv-1495)-730 


To: Detroit From: New York 
Re) De] 07/02/2003 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview ofL___| be -5 


SAN FRANCISCO 


AT PLEASANTON, CALIFORNIA 


Conduct logical interview of b6é -5 
fter being informed of LAMO's arrest h7C -5 
writer. Lives with i 


. . i 
Before interview is conducted, contact writer oe name of { 


Agent who will be assigned to conduct logical interview of 
SAN FRANCISCO 


AT SAN FRANCISCO, CALIFORNIA 


Conduct logical interview of 
after being informed of LAMO's arrest by 
writer. b6 -5 
b7c -5 
Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


SAN FRANCISCO 


AT SANTA ROSA, CALIFORNIA 


i interview of 
fter being informed of LAMO's arrest by 
writer. Lives with] ° 


bo -5 
Before interview is conducted, contact writer with name of h7c -5 
Agent who will be assigned to conduct logical interview of 


SAN FRANCISCO 


AT SANTA ROSA, CALIFORNIA 


Conduct logical interview of[_____ 
after being informed of LAMO's arrest by 
bo 


writer. Lives wit. 


Before interview is conducted, contact writer with name oftb7C -5 
Agent who will be assigned to conduct logical interview of 


SAN FRANCISCO 


21 


FBI(19-cv-1495)-731 


To: i z New York _ 
re: [> 07/02/2003 vB 
AT CASTRO VALLEY, CALIFORNIA 


i i rview of 
after being informed of LAMO's arrest 
by writer. is possibly related to 


CL] determine relationshi 
interviewed in| 
interviewed i 


is being b6 -5 
b7Cc -5 


Before interview is conducted, contact writer wi, 
Agent wi. will be assigned to conduct logical interview of H 
SAN FRANCISCO 


AT SAN FRANCISCO, CALIFORNIA 


interview off 
after being informed of LAMO's - 
arrest by writer. 


Before interview is conducted, contact writer wi £ 
Agent who will be assigned to conduct logical interview of 


SAN FRANCISCO 


AT OAKLAND, CALIFORNIA 


Conduct logical interview off[ ng 8s 
eee J ’atter being informed oF TAVOTS 5 


arrest by writer. bIC -5 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of| 


SAN FRANCISCO 


AT SAN FRANCISCO, CALIFORNIA 


ical interview of (eer orto, 2°75 
after being intormed o S b7C -5 
arrest by writer. ~ 
Before interview is conducted, contact writer wi £ 
Agent who will be assigned to conduct logical interview of 


SAN FRANCISCO 


AT SAN FRANCISCO, CALIFORNIA 


22 


FBI(19-cv-1495)-732 


“To: Detroi : New oo @ | 
Re: 07/02/2003 b3 -2: 


bI7E -3 
Conduct logical interview of 
i informed of LAMO's arrest by b6 -5 
writer. in San Francisco, CA. pI -5 
Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview o 
SAN FRANCISCO 
AT SAN FRANCISCO, CALIFORNIA 
interview of be -5 
arter being informed 0: b7c -5 
LAMO's arrest by writer. 
Before interview is conducted, contact writer wi 
Agent who will be assigned to conduct logical interview of 


SAN FRANCISCO 


AT SAN FRANCISCO, CALIFORNIA 


Conduct logical interview of eee ee er 
after being informed 36) S_arres c 


Y bb 
ig possibly related tf ° 
Of LAMO. b7Cc -5S 


writer, 


Before interview is conducted, contact writer with_name of 
Agent who will be assigned to conduct logical interview of 


SAN FRANCISCO 


AT SAN PRANCISCO, CALIFORNIA 


iew of 


after being informed of LAMO's arrest 
is possibly related e188 5-5 


of LAMO. pyc -5 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of| 


SAN FRANCISCO 


AT SAN FRANCISCO, CALIFORNIA 


after being informed of LAMO's arrest 
bo 


bIC -S 


23 


FBI(19-cv-1495)-733 


b3 -2 


To: Detroit From: New York e 
Re: DJ 07/02/2003 bg =3 


by writer. LAMO's phone records show he called above mentioned 
telephone number(s) . . 

. . . . . bo -oj 

Before interview is conducted, contact writer with name of bIC 

Agent who will be assigned to conduct logical interview of - 


l 
on 


SAN FRANCISCO 
AT OAKEAND, CALIFORNIA 


Conduct logical interview of 5 
cl OO—rvTO—v—vs—r—/d after being informed of LAMO's arrest by p7c -5 


wrater. 


Before interview is conducted, contact writer with_name of 
Agent who will be assigned to conduct logical interview of 


SAN FRANCISCO 


AT CASTRO VALLEY, CALIFORNIA 


: i interview of bS -5} 
telephone Arr b7c 5 
after being informed of LAMO's arrest by writer. DIE _ 


Before interview is conducted, contact writer with_name of | 
1 


Agent who will be assigned to conduct logical interview of 
SAN FRANCISCO 
AT_SAN FRANCISCO, CALIFORNIA 


after being informed of LAMO's arres 
bé -5 


by writer. 


. . . bIC -5 
Before interview is conducted, contact writer wi = 
Agerit who will be assigned to conduct logical interview of 
SAN FRANCISCO 
AT CASTRO VALLEY, CALIFORNIA 


Conduct logical interview a b6é -5 
es telephone ad pyc 5 


after being informed of LAMO's arrest by writer. DIE 
LAMO's phone records show he called above mentioned telephone 
number (2). Po nay be related tol) 


24 


FBI(19-cv-1495)-734 


fo: Detroit From: New York & 
te: Le] 07/02/2003 


Before interview is conducted, contact writer with name of ok 
will be assigned to conduct logical interview of 


Agent who 


5| 
b7C -5 
SAN FRANCISCO 


AT CASTRO VALLEY, CALIFORNIA 


exview of 
after being informed _o S arrest 


by writer. may be related toL____——S—_ whose ae 
telephone ed by LAMO. b6 


bIC -5 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


SAN PRANCISCO 
AT SANTA ROSA, CALIFORNIA 


Conduct logical interview of 
telephone and 
after being informed of LAMO's arres yy writer. b6 -5 


iS) 
LAMO's phone records show he called above mentioned telephone bIC 
number (s) . bIE -1 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


SAN _ FRANCISCO 
AT SAN FRANCISCO, CALIFORNIA 


SSS SS ee 
telephone after being b6 -5 


informed of LAMO's arrest by writer. LAMO's phone records show he ae 
called above mentioned telephone number(s). 


b7E -1 


Before interview is conducted, contact writer wi name of 
Agent who will be assigned to conduct logical interview of 


Set Lead 8: (Action) 
LOS ANGELES 


AT STUDIO CITY, CALIFORNIA 


25 


FBI(19-cv-1495)-735 


es Detroit From: oe  ) e@ 


07/02/2003 b3 -2 
b7E -3 
Cond: ical interview of 
after being informed of LAMO's arrest _ 
yy writer. bo -5 
b7C -5 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


LOS ANGELES 
AT HUNTINGTON PARK, CALIFORNIA 


ical interview of[____ Tb -S 
after being informed of LAMO's arrest by b7C -5 


writer. 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


LOS ANGELES 


AT LOS ANGELES, CALTFORNIA 


i interview of 
telephone 
after being informed of LAMO's arres yy writer. LAMO's phone records 


show he called above mentioned telephone number(s). Be 25 


Before interview is conducted, contact writer with name efb7C -5 
Agent who will be assigned to conduct logical interview of b7E -1 


LOS ANGELES 
AT CARMARILLO, CALIFORNIA 


Conduct logical interview_of 
=e telephone after being informed 


of LAMO's arrest by writer. LAMO's phone records show he called above 
mentioned telephone number(s). bé6 


=5 
eS 
Before interview is conducted, contact writer with name of BIC i 
Agent who will be assigned to conduct logical interview off] ODE -1 
LOS ANGELES 


AT LOS ANGELES, CALIFORNIA 


Conduct logical interview of[ 
after being informed of LAMO's arrest by 
writer. has a Criminal history. 


det bIc -5 


FBI(19-cv-1495)-736 


To: Detroit From: New ).@ @ e 


Before interview is conducted, contact writer with mame of 
Agent who will be assigned to conduct logical interview off be -5 
: bic -5 
LOS ANGELES 


AT WILMINGTON, CALIFORNTA 
Conduct logical interview of[ 
CO Or—A—T—_—E—_— after being informed of LAMO's arrest by 
writer. 
bé -5 


Before interview is conducted, contact writer with name of p7c —-5 
Agent who will be assigned to conduct logical interview of : 


LOS ANGELES 


AT LANCASTER, CALIFORNIA 


also known as 


be -5| 
of b7c -5 
LAMO's arrest by writer. S phone ds show he called above b7E -1 
mentioned telephone number(s). ' 
Before interview is conducted, contact writer wi 
Agent who will be assigned to conduct logical interview of 
LOS ANGELES 
AT POTERVILLE, CALIFORNIA 
Conduct logical interview of b6 -5 
after being informed o ee * 


LAMO's arrest by writer. 
Before interview is conducted, contact writer wi 

Agent who will be assigned to conduct ogical interview | 

LOS ANGELES 

AT VENTURA, CALIFORNIA 


interview of be -5 
after being informed of LAMO's arrest By 44. -5 
writer. i 2 a oe 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 
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FBI(19-cv-1495)-737 


“To: j rom: ,9.@. : @ ] b3 -2 


Re: 07/02/2003 b7E -3 


LOS ANGELES 


AT MISSION VIEJO, CALIFORNIA 


be -5 
bIC -5] 


after 


Before interview is conducted, contact writer with_name of 
Agent who will be assigned to conduct logical interview of 


Set Lead 9: (Action) 


BALTIMORE { 
AT FELTON, DELAWARE 


interview of 
telephone 
alter being informed of LAMO's arrest by 


writer. LAMO's phone records show he called above mentioned telephone be -s 
number (gs) . bic -5 


bIE -1 
Before interview is conducted, contact writer wi £ 
Agent who will be assigned to conduct logical interview o 
BALTIMORE 


AT GAITHERSBURG, MARYLAND 


telephone 


f 3 in: 's arrest by writer. 


LAMO's phone records show he ca b6 -S 
above mentioned telephone number(s). has a criminal history. pyc -5 
BIE -1 


Before interview is conducted, contact writer wi ame of 
Agent who will be assigned to conduct logical interview of 


BALTIMORE 


AT ANNAPOLIS, MARYLAND 


ical interview _of 
telephone 
after being informed of LAMO's arrest by writer. 


b6 -5 
b7¢ -5 
b7E -1 
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FBI(19-cv-1495)-738 


,o.@ 


07/02/2003 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


Set Lead 10: (Action) 


PHILADELPHIA 


AT _SELLERSVILLE, PENNSYLVANIA 


Conduct logical interview_of 
telephone b7E -1 
after being informed of LAMO's arrest by writer. LAMO's phone recoras 


show he called above mentioned telephone number(s). 


Before interview is conducted, contact writer wi e of 
Agent who will be assigned to conduct logical interview of 


PHILADELPHIA 


AT ELIZABETHTOWN, PENNSYLVANIA 
i i rview of 
telephone 
informed of LAMO's arrest writer. 


Before interview is conducted, contact writer oy 


possibly illegally b6é -5 
b7c -5 
Agent who will be assigned to conduct logical interview of 

PHILADELPHIA 


AT ELIZABETHTOWN, PENNSYLVANIA 


ical interview of 
telephone 
informed of LAMO's arrest writer. 


exis/nexus userii 


be -5 
b7c -5 


given to 


Before interview is conducted, contact writer wi name of 
Agent who will be assigned to conduct logical interview of 


PHILADELPHIA 


AT ELIZABETHTOWN, PENNSYLVANIA 
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FBI(19-cv-1495)-739 


‘to: i 2 Oo . e@ @ 
Re: Do] 07/02/2003 


telephone 


possibly illegally used a lexis/nexus userid given to : 
ceeie obtaining a Federal Grand Jury subpoena fo pyc -5 


Before interview is conducted, contact writer with _name of 
Agent who will be assigned to conduct logical interview of 


PHILADELPHIA 


AT NORRISTOWN, PENNSYLVANTA 


i interview of 
telephone 
after being informed of LAMO's arres yy writer. 


phone records show he called above mentioned telephone b6 -5 
number(s). b7c 


-5 
Before interview is conducted, contact writer with name ofb7E -1 
Agent who will be assigned to conduct logical interview of 


Set Lead 11: (Action) 


HOUSTON 
AT VICTORIA, TEXAS 
telephone 
after being informed of LAMO's arrest by writer. LAMO's phone records. 
show he called above mentioned telephone number(s) . be -5 


bIC -5 
Before interview is conducted, contact writer with name of n7p _1 
Agent who will be assigned to conduct logical interview of 
Set Lead 12: (Action) 
CLEVELAND 


AT ALLIANCE, OHIO 


tev of eee 
after being informed of LAMO's arrest 
YY writer. b6 -5 


b7c -5 
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FBI(19-cv-1495)-740 


to: 7 om: 2.2. ; ee b3 -2 
Re: 07/02/2003 DIE -: 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of b6 -5 
Set Lead 13: (Action) . bIC -5 


OKLAHOMA CITY 


AT OKLAHOMA CITY, OKLAHOMA. 


after being informed of LAMO'’s arrest by writer. 
Before interview is conducted, contact writer wi 

Agent who will be assigned to conduct logical interview of 

OKLAHOMA CITY 


AT ADA, OKLAHOMA 


jcal_interview off 
after being informed of LAMO's arrest by 
writer. bo -5 


b7c -5 
Before interview is conducted, contact writer wi 
Agent who will be assigned to conduct logical interview of 
Set Lead 14: (Action) 
NEWARK 
AT RIVERTON, NEW JERSEY 
- Ww 
interview of[ Td Boe, 
after being informed of LAMO's arrest by “5 


Writer. LAMO's phone records show he called above mentioned telephone 
number(s) . 


Before interview is ‘conducted, contact writer wi of 
Agent who will be assigned to conduct logical interview of| 


NEWARK 
AT MOORESTOWN, NEW JERSEY 


ical interview off id 
after being informed of LAMO's arrest by 


writer. 


b6 -5 
b7IC -5 
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FBI(19-cv-1495)-741 


‘to: a F | ee b3 -2 
Re: ee 07/02/2003 b7E -3 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview ofL_ sd b6 -5 


_ 
NEWARK BIC -S 


AT TEANECK, NEW JERSEY 


Conduct logical interview of| 
after being informed of LAMO's arrest by pé -5 


writer. b7c -5 


Before interview is conducted, contact writer with_name of 
Agent who will be assigned to conduct logical interview of 


NEWARK 


AT WASHINGTON, NEW JERSEY 


Conduct logical interview of[_____] po -5 
oT after being informed of LAMO's arrest by writer» 7c _5 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


NEWARK 


AT SPRINGFIELD, NEW JERSEY 


Conduct logical interview of be -5 
after being informed of b7C -5 


LAMO's arrest by writer. 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


Set Lead 15: (Action) 
SEATTLE 


AT SILVERDALE, WASHINGTON 


interview 4 
after being [eae of LAMO's arrest 


by writer. LAMO's phone records show ntioned 
telephone number(s). a ers 
Cee may know LAMO. foe inane is also to be 


interviewed. 
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FBI(19-cv-1495)-742 


To: Detroit From: Oe ee b3 -2 


07/02/2003 bIE -3 


Before interview is conducted, contact writer with name of 


Agent who will be assigned to conduct logical interview of 
SEATTLE b6 5 
bIC -5S 


AT SILVERDALE, WASHINGTON 


view off ns 5 
after being informed o. Ss arres , >t 


by writer. LAMO’s phone records show he called above mentioned bic -S 
telephone number(s). Havel 

may know LAMO. name 1 also to be 
interviewed. 


Before interview is conducted, contact writer wi H 
Agent who will be assigned to conduct logical interview of ! 


SEATTLE 


AT SEATTLE, WASHINGTON 


eal interview off Eee 
i informed of LAMO's arrest by 
writer. Also, at address is who is also to be b6 -5 


interviewed. 
bIC -5 
Before interview is conducted, contact writer wi 
Agent who will be assigned to conduct logical interview of 
SEATTLE 
AT SEATTLE, WASHINGTON 
interview of 
after being informed of LAMO's arrest by 
writer. Also, at address is who is also to be b6 -5 
interviewed. p7c -5 
Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 
SEATTLE 
AT VERADALE, WASHINGTON 
Conduct logical interview op[__ 
a: ND) BF EeE Being TESHEE OF TANTS 
bo -5 
b7C -5 
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FBI(19-cv-1495)-743 


: “* @ : b3 -2 
To: Detroit From: New Yor ee b7E -3 
Re: [07/02/2003 
arrest by writer, LAMO's phone records show he called above mentioned 
telephone number(s). 
Before interview is conducted, contact writer wi of . 
Agent who will be assigned to conduct logical interview of b6 -5 
. b7c -5 
Set Lead 16: (Action) 
SAN DIEGO : 
AT REDONDO BEACH, CALIFORNIA 
1 interview off ___ = 
after being informed of LAMO's arrest by 
may be related to be -5 
b7c -5 


interviewed. has a criminal history. 


Before interview is conducted, contact writer wi £ 
Agent who will be assigned to conduct logical interview of 
SAN DIEGO 


AT CHULA VISTA, CALIFORNIA 


Conduct logical interview off 
after being informed of LAMO's arrest 
y writer. Also at address is| who is also to be interviewed. 


Before interview is conducted, contact writer wi CfD7C -5 
Agent who will be assigned to conduct logical interview of 


SAN DIEGO 


AL CHULA VISTA, CALIFORNIA 


ical interview off 
eing informed of LAMO's arrest 
y writer. AIso at address is 


who is also to be interviewed. 


bo -5 
Before interview is conducted, contact writer with name of Ic _ 
Agent who will be assigned to conduct logical interview of ~ 9 
SAN DIEGO 


AT_ ESCONDIDO, CALIFORNIA 
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FBI(19-cv-1495)-744 


ae Detroit From: Ae ee Pe 


res Pe] (07/02/2003 


after being informed o S arrest BY 
writer. 


b6 -5 
Before interview is conducted, contact writer wi of p7c -5 
Agent who will be assigned to conduct logical interview of 


SAN DIEGO 


AT OCEANSIDE, CALIFORNIA t 


nirorme [o) 8S arres ry p7c -5 


who is also to be 


Conduct logical interview of 


writer. Also at address fs 
interviewed. Determine relationship fo 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


SAN DIEGO 
AT OCEANSIDE, CALIFORNIA 


Conduct logical interview | 
after being Informed o: S arrest Dy 


writer. Also at address is who is also to be b6 -5 
interviewed. Determine relationship t pyc —5 


Before interview is conducted, contact writer with_name of 
Agent who will be assigned to conduct logical interview of 


SAN DIEGO 


AT SAN DIEGO, CALIFORNIA 


ical interview of 
after being informed of LAMO's arrest by. 
writer. 
Before interview is conducted, contact writer wi 
Agent who will be assigned to conduct logical interview of b6 -5 


Set Lead 17: (Action) bICs=5 


INDIANAPOLIS 


AT COLUMBUS, INDIANA 
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FBI(19-cv-1495)-745 


To: it ‘rom: New @. & e 
Re: 07/02/2003 b3 -2 
bvE = 

i i i fF 

telephone after aa 
being informed of LAMO's arrest by writer. LAMO's phone records show i 
he called above mentioned telephone number(s). b6 -5 
bre: -5 
Before interview is conducted, contact writer with name of DIE - 


Agent who will be assigned to conduct logical interview of 
Set Lead 18: (Action) 
PORTLAND 
AT PORTLAND, OREGAN 
Conduct logical interview of STE ae ee =5 
after being Informed 3: b7Cc -5 
by writer. ‘ 


Before interview is conducted, contact writer with _name of 
Agent who will be assigned to conduct logical interview of 


Set Lead 19: (Action) 
OMAHA 


ATI CLARKSON, NEBRASKA 


Conduct _logical interview eg b6é -5 
after being informed of LAMO's arres y Writer. b7C —-5 

is related to| i io being interviewed in 
Venture, California. 


Before interview is conducted, contact writer with_name of 
Agent who will be assigned to conduct logical interview of 


Set Lead 20: (Action) 
MILWAUKEE 


AT WILLIAMS BAY, WISCONSIN 


ionduct logical interview ee 
being informed ©! S arres iv 
writer. bo -5 


Before interview is conducted, contact writer with name of OIC 
Agent who will be assigned to conduct logical interview of 


MILWAUKEE 
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FBI(19-cv-1495)-746 


we 


“To: i : ,O®. e@ b3 -2 
Re: tC 07/02/2003 b7E -3 


AT LAKE GENEVA, WISCONSIN 


Conduct logical interview of GARY GYGAX, 316 Madison Street, 
Lake Geneva, WI 53147 after being informed L rrest by writer. 
GYGAX is a computer game designer. ACS was or GYGAX. 

Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of GYGAX. ‘ 


Set Lead 21: (Action) 
LITTLE ROCK 
AT BISMARCK, ARKANSAS 


Conduct logical interview of 
a 


after 
eing informed of LAMO's arrest by writer. be -5 
. . . . ; b7C -5 
Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


Set Lead 22: (Action) 


MIAMI 


AT VERO BEACH, FLORIDA 


Conduct logical interview off 
i i £ LAMO's arrest by 
writer. b6é -5 


b7C -5 
Before interview is conducted, contact writer with_name of 
Agent who will be assigned to conduct logical interview of 


Set Lead 23: (Action) 
JACKSONVILLE 
AT GULF BREEZE, FLORIDA 
ical interview of[__ 
after being informed of LAMO's arrest by c 
writer. be -5 
b7C -5 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


SACKSONVILLE 
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| FBI(19-cv-1495)-747 


A . z 
To: _D. i ms bd e b3 -2 
Re: 07/02/2003 bIE -3 


AT ORMOND BEACH, FLORIDA 


Conduct logical interview of 
a ES seed 


after being informed of LAMO's arrest by writer. pic -5 


Before interview is conducted, contact writer i meee 
Agent who will be assigned to conduct logical interview of 


Set Lead 24: (Action) 


CHICAGO 
AT OAK FOREST, ILLINOIS 
i 
i 
logical interview of 
telephone after be -5; 
being informed of LAMO's arrest by writer. b7c -S 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 
CHICAGO 
AT PLAINFIELD, ILLINOIS 


i interview of 
telephone after being bé -5 
informed of LAMO's 


arrest by writer. b7c -5 
BIE -1 


Before interview is conducted, contact writer with_name of 
Agent who will be assigned to conduct logical interview of 


Set Lead 25: (Action) 
SPRINGFIELD 


AT ROCK ISLAND, ILLINOIS 
ical intervi 
OL LAMO'’s arrest by writer. Related to is being 
interviewed in A i + The NYO is oO! a rederal Grand 


Before interview is conducted, contact writer wi of 
Agent who will be assigned to conduct logical interview of 
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FBI(19-cv:1495)-748 


© 2 ~ 
To: Detroit From: --@@ ee 


Re: [J 07/02/2003 bo -2 
bIE -3 

SPRINGFIELD 
AT ROCK ISLAND, ILLINOTS 


Conduct logical interview of b3 -1 
CO ) tetephone Treg beina_ *6 -s 
informed of LAMO's arrest by writer. Related © bIC -5 


is being interviewed in Alexandria, VA. The NYO is obtain 
Federal Grand sue subpoena for] Also at addres] 


Before interview is conducted, contact writer wi of 
Agent who will be assigned to conduct logical interview of 


SPRINGFIELD 


AT ROCK ISLAND, ILLINOTS 


ical interview of 
telephone b3 -1 
of LAMO's arrest by writer. Related to is being 1. 


interviewed in Al . . The NYO Is obtaining a Federal Grand bye -5 
poena for Also at addres] 


Before interview is conducted, contact writer wi e of 
Agent who will be assigned to conduct logical interview of 


Set Lead 26: (Action) 
MINNEAPOLIS 
AT MINNEAPOLIS, MINNESOTA 


Conduct logical interview of 
telephone after 


being informed of LAMO's arrest by writer. b6 -5 
b7c -5 


Before interview ig conducted, contact writer with _name of 
Agent who will be assigned to conduct logical interview of 


MINNEAPOLIS 


AT BOWDLE, SQUTH DAKOTA 


interview 
telephone 


is possibly 
determine relationship. 


informe 
related to 
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FBI(19-cv-1495)-749 


ra . a 
To: Detroit From: ,O@. e@@ b3 -2} 


Re: 07/02/2003 b7E -3 


is being interviewed in Castro Valley, California and 
is being interviewed in Arlington, Texas. ps -_ 
C - 
Before interview is conducted, contact writer with_name of 
Agent who will be assigned to conduct logical interview of 
Set Lead 27: (Action) 
HONOLULU 
AT HONOLULU, HAWAIT 


Conduct logical interview of 
telephone alter being 


intormed of LAMO'’s arrest by writer. LAMO's phone records show he 


called above mentioned telephone number. ees I 
i 
b7E -1 j 


Before interview is conducted, contact writer with_name of 
Agent who will be assigned to conduct logical interview of 


HONOLULU 


AT PATA, HAWAIT 


Conduct logical inter 


is being interviewed at 
w ool. The NYYOQ_is enclosing information obtaine' b6 -5 
ol to HONOLULU. lis to be b7c -5 


interviewed, if located at the above mentioned address. The NYO is 
obtaining a Federal Grand Jury subpoena fo 


Before interview is conducted, contact writer wi 
Agent who will be assigned to conduct logical interview of 
: 
Set Lead 28: (Action) 


BOSTON 


AT SOMERVILLE, MASSACHUETTS 


_ Conduct logical interview a be -8 
telephone pic -5 


writer. 
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FBI(19-cv-1495)-750 


eee] 07/02/2603 


Before interview is conducted, contact writer wi £ 
Agent who will be assigned to conduct logical interview of 
BOSTON 


AT PROVIDENCE, RHODE ISLAND 


interview of[ 
after being informed of LAMO's arrest by 
writer. Investigation by the NYO has revealed thatL___—idiss a 


Before interview is conducted, contact writer oS 


Agent who will be assigned to conduct logical interview of 
BOSTON 


AT MONSON, MASSACRUETTS 


i i iew of 
telephone after 
@ing ankormed 3} S arres yy writer. 
Before interview is conducted, contact writer wi of 
Agent who will be assigned to conduct logical interview o. 


BOSTON 


AT SPRINGFIELD, MASSACBUETTS 


after being informed o S arrest 


by writer. 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


BOSTON 


AT MIDDLETOWN, RHODE ISLAND 


Conduct logical interview of| 
after being Informed o Ss arres iy 
writer. 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


BOSTON 
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bIE -3 
b6 -5 
b7C -5I 
b6 -5 
b7C -5 
b6 -5 
b7¢c -5S 
b6 -5 
b7¢c -5 
be -5 
bI7c -5 


FBI(19-cv-1495)-751 


. s " 
To: Detroit From: ,@. e@ b3 -2 


AT NORTH KINGSTOWN, RHODE ISLAND 


Conduct logical interview of 
telephone after Being 

informed of LAMO's arrest by writer. Also at address is| bé -5 

also to be interviewed. bic -5 


Before interview is conducted, contact writer with_name of 
Agent who will be assigned to conduct logical interview of 


BOSTON 


AT NORTH KINGSTOWN, RHODE ISLAND 


i i iew of 
telep: 
informed of LAMO's arrest by writer. Also at address is| 


also to be interviewed. b6 -5 
7c -5 


Before interview is conducted, contact writer with_name of 
Agent who will be assigned .to conduct logical interview of 


BOSTON 


AT LYNN, MASSACHUETTS 


Conduct logical interview of 


eing informed of LAMO's arrest by writer. 7c -5 


Before interview is conducted, contact writer wi of 
Agent who will be assigned to conduct logical interview of 


Set Lead 29: (Action) 
LAS VEGAS 
AT RENO, NEVADA 
ical intervi 


telephone atter being informed 
of LAMO's arrest by writer. ACS is 


bé6 -5 
Before interview is conducted, contact writer with name of ee - 


Agent who will be assigned to conduct logical interview of 
LAS VEGAS 


AT HENDERSON, NEVADA 
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FBI(19-cv-1495)-752 


"ro: i _ Oe. ry ) 
Re: 07/02/2003 b3 -2 


bTE -3 
Tx ical interview of 
after being informed of LAMO's 
- b6 -5 
arrest by writer. e268 


Before interview is conducted, contact writer wi e of 
Agent who will be assigned to conduct logical interview of 


LAS VEGAS 


AT INCLINE VILLAGE, NEVADA 


Conduct logical interview of[ 
after being informed of LAMO's arrest by 


. rah bé -5 
elped in the capture and conviction of| wie. <5 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 
LAS VEGAS 


AT LAS VEGAS, NEVADA 


Conduct logical interview of 
| telephone atter being 
informed of LAMO's arrest by writer. LAMO's phone records show he 
called above mentioned telephone number(s). b6 -5 


b7c -5 


Before interview is conducted, contact writer wi name of b7E -1 
Agent who will be assigned to conduct logical interview of 


Set Lead 30: (Action) 


DENVER 


AT COLORADO SPRINGS, COLORADO 


telephone 


after being informed of LAMO's arrest by writer. Pras 


. A 7 . ‘ bre - 
Before interview is conducted, contact writer with_name of 5 


Agent who will be assigned to conduct logical interview of 
DENVER 


AT LITTLETON, COLORADO 
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FBI(19-cv-1495)-753 


* ry 
To: Detroit From: ,O®@. 


Re: [07/02/2003 bre -3 


Conduct logical interview of 
telephone 
after i i d of LAMO's arrest by writer. 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


DENVER 


AT DENVER, COLORADO 


Conduct logical interview 


‘p. 
being informed of LAMO's arrest by writer. 


LAMO's one records show b7c -5 
he called above mentioned telephone number(s) of fo ee -1 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of employees 
of 


DENVER 


AT DENVER, COLORADO 


other address: 


telephone 
after being informed of LAMO's 
arrest by writer. 


LAMOTS lone records show he called above mentioned 
telephone munber(s) off] be -5 


b7c -5 
Before interview is conducted, contact writer with name of bz -1 


fea be assigned to conduct logical interview of 


Set Lead 31: (Action) 


DALLAS 
AT ARLINGTON, TEXAS 


Conduct logical interview off 
after being informed of LAMO's arrest 


Taybe related t¢______Jand 
is being interviewed in Castro Valley, 
is being interviewed inl south 


California and| 
Dakota. 
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FBI(19-cv-1495)-754 


To: i : O@ ee@ b3 -2 
ge: [407/02 /2008 be *s 


Before interview is conducted, contact writer wi fhe -5 
Agent who will be assigned to conduct logical interview of bie -s 


DALIAS 


AT DALLAS, TEXAS 


logical interview of 


ormed of LAMO's arrest by 


writer. is the be -5 
- p7c -5 
Before interview is conducted, contact writer wi me of 
Agent who will be assigned to conduct logical interview of 
DALLAS 
AT BEDFORD, TEXAS 
ogical interview o¢[ ________ 
after being informed of LAMO's 
e related to ADRIAN LAMO b6 -5 
b7c -5 
Determine relationship(s 
Before interview is conducted, contact writer wi e of 
Agent who will be assigned to conduct logical interview of 
Set Lead 33: (Action) 
ATLANTA 
AT ATLANTA, GEORGIA 
dew of 
telephone 
after, 4 informed of LAMO's arres yy writer. is 
an attorney for b6 -5 
pic -5 


Before interview is conducted, contact writer with name of 
Agent who will be assigned to conduct logical interview of 


Set Lead 34: (Info) 
CYBER 
AT WASHINGTON, DC 
Read and clear. 
yeress DO NOT CONDUCT INTERVIEWS UNTIL CONTACTED BY WRITER 
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FBI(19-cv-1495)-755 


L INFORMATION 
REIN TS WNOLA! 


information: 


notification card was 


tol 
The most_recent 


the handwriting on the movin 
Towle to ead), 
current address as 


Tt also reveals 
lat the[—Cédiaddress 


is registered to 


092bhC. ol wed. FBI(19-cv-1495)-769 


b3 -2 


be -1 
bIC -1 
bIE -3 


The following investigation was conducted by sal 
Lat Bismarck, Arkansas on 11/5/2003: 


contact_was made with | b6 -5 


at her residence 


telephone number~ sd b7C -5 


white male, date of 
resent during the contact, as he was at 


Arkansas, and has been so employed for the pas 

is employed a 
in] Arkansas.° e€ an ex husband have been married 
since 


When questioned as to whether she or her husband were 
familiar with ADRIAN LAMO, she advised that she was not. She was 
shown a photograph of LAMO, again with negative results. She B 


On the above date, 
white female 


Her husband, 


advised that both she and her husband are merely casual users of 

the Internet, and she is not familiar with anyone who has the 

computer expertise to "hack" major corporations. When questioned 

as to whether there were any circumstances that might explain the 
telephone number appearing within the telephone records of b6 -5 

LAMO, she advised that the only explanation she could offer would b7C -5 

be that sometime around Memorial Day, 2002, she was contacted by 

the local telephone company, Central Arkansas Telephone 

Cooperative, who advised her that while c i line upgrades, 

technicians had located evidence that 0 a ESP line 

had been spliced into. The possible splice had occurred at a 

telephone_service pedestal which was located approximately % mile 

from the LJ residence. The telephone company representative 

assumed that someone had_spliced into their line for access to 

make calls, and advised — to review their corresponding 

bills to identify any improper usage. She was able to locate the 

corresponding bill; however, there were no strange or unusual 

calls readily noticeable, and their bill amount was in the normal b3 -2 

range. bo -1,5 

. b7c -1,5 
was furnished a photocopy of the photograph of bIE -3 
LAMO to display to her husband upon his return from work, and she ~ 


assured that if knew of the indiswzi 
contact the interviewing Agent. No such follo 
received. 


SiO MNO |. iss 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Dates 11/06/2003 


To: New York Attn: al = 
Squa = 


From: Little Rock b3 -2 


Squad 7, Hot, i ~ 
contacts ad be = 
b7c -1 


Title: ADRIAN LAMO; 
NEW YORK TIMES - VICTIM 
COMPUTER INTRUSION 


Synopsis: Lead 21 covered at Bismarck, Arkansas. 


reference: [| b3 -2 
Enclosure(s): Enclosed for i i i ive DIC -5 
ee fon si /8750 pre 


on 11/5/2003. 


D iis: contact was made yicn| 
ee who was at work. who was very 

coopera ised she is not familiar with subject Lamos, and 

she ana] Jare only casual Internet _users. She explained 

that one possible explanation for theL_ | telephone number 

showing up in Lamo’s records is that approximately Memorial Day, b6 -5 
2002, she was contacted by the local telephone company b7c -5' 
advised that technicians had located evidence that the 

telephone line had been spliced into at a location approximatel 

% mile from their residence. It should be noted that the 

residence is located in a sparsely populated, rural area o 


As no further investigation is requested of Little b3 -2 

Rock, this matter is considered covered. bo -1 
b7c -1 
7 bIE -3 


bot —~ NEW YORK 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 11/07/2003 
To: New York aten: sat] 
DT-5 . 
From: Los Angeles _ 
: bs 
Contact: SA 
b7c -1 
Approved By: bE -3 


Drafted By: 
Case ID #: 


Title: ADRIAN LAMO; 
New York Times - Victim; 
Computer Intrusion; 
OO: NY 


Synopsis: Advise of leads covered. 


Reference: b3 7-2 
DIE -3 


Details: Referenced leads wer i to Los Angeles in July 
and August of 2003. Referenced advises that New York 


will contact Los Angeles when captioned subject has been 
apprehended so that interviews can be conducted. 


In as much as Los Angeles has not been updated on the 


status of this case, Los Angeles is closing this lead and will 
conduct no further investigation until further contacted. 


+ 


SeRuALizeg__——_ ‘FLED 


5 | b3 -2 
dye APR 25 004 f b6 -1 
: £G1 — NEWYORK b7c -1 

b7E -3 
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born 


ity b6 -1,2 
who resides at 


b7c -1,2 
was 
. Also present at the interview was Special Agent (SA) 
a After being advised of the identity of the 
interviewing agent and the purpose of the itezyled' —_ Jprowided 


the following information: 


LJstatea that he was not familia i LAMO, b6 -2 
other than awareness of LAMO'S compromised of systems b7C -2 
in (he believed) December of 2001. had not been in contact 


with LAMO or had any type of relationship with him. 

: [  providea information regarding two employees that b6 -2,5 
x the intrusion occurred, b7C -2,5 
followed up with both 

individuals and determined that had no contact with LAMO and 

that had indicated a member of her staff h; 

the and may have information to share. 

that was_the individual provided b 

further provided that who is located in 

been cooperating fully with the FBI investigation. 


stated that LAMO left n ious code or damage b6 -2 

during his Intrusion into the system. [eee that LAMO did pyc -2 
call the company to report the vulnerability after he had ete 
compromised the system. Although[_]could not say with certainty 


how LAM the system, he believed it was through proxy 
server: had operating at the time of the intrusion. 

Lo hia not recognize any of the names provided by the 
New York Office, however _he did provide information on a hackers p¢ -2,5 
conference that The “9 & 
: as b7C -2,5 
een invited to speak at the conference 
as not accepted the invitation. 


every year bu 


Lprovidea articles (news clips) that were found i be -2,5 
his computer regarding LAMO and an e-mail confirmation off b7c 2.5 
fer rieoneece in the New York Office of the FBI. One article 

mentioned other companies that LAMO was responsible for 


Investigation on 09/25/2003 a Ashburn, Virginia b3 -2 
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Continuation ofPpaoce — [id 20n 09/25/2003 ,Page 2 


compromising including BANK OF AMERICA, FOX NEWS, CITICORP, JP 
MORGAN, MCDONALD'S, and SUN MICROSYSTEMS. Copies of these documents 
are being maintained in the FD 340 1A subsection. 


FBI(19-cv-1495)-775 


Ce eS ee ee ae ee ee ae 


b6 -1 
b7C -1 


Grand Jury Subpoena 0108 


united Statex District @aurt 
SOUTHERN DISTRICT OF NEW YORK 


TO: 

: b3 -1 
bé -3 
b7c -3 


GREETINGS: 


WE COMMAND YOU that all and singular business and excuses being laid aside, you appear and attend 
before the GRAND JURY of the people of the United States for the Southem District of New York, at the 
United States Courthouse, Foley Square (40 Centre Street), Room 209, in the Borough of Manhattan, City 
of New York, New York, in the Southern District of New York, at the following date, time and place: 


Appearance Date: ae Appearance Time: — 


to testify and give evidence in regard to an alleged violation of : 


b3 -1 


Title 18, United States Code, Section 1030 


and not to depart the Grand Jury without leave thereof, or of the United States Attorney, and that you bring 
with you and produce at the above time and place the following: 


SEE ATTACHED RIDER 


NB: PERSONAL APPEARANCE IS REQUIRED. Please produce the requested documents on 
or before the return date to Special ee Bureau of Investigation, PS 5h 
26 Federal Plaza, New York, New York 10278, telephone numbel Facsimile pe: 
number (212) 384-4660. . 


Failure to attend and produce any items hereby demanded will constitute: contempt of court and will subject ° 
you to civil sanctions and criminal penalties, in addition to other penalties of the Law. 


DATED: New York, New York 


5 i a 

ar b6é -4 
JAMES B. COMEY » Com / fr eetcata 
United States Attorney for the 
Southern District of New York + Q Plead Wakes . 
Assistant United States Attorney Telephone: 
One St. Andrew’s Plaza * (212) 637-2487 
New York, New York 10007 
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Date of transcription 09/24/2003 

bé -6 
born onL__| bIC -6 
who resides at 
with cellular 
was interviewed. After being 


the interviewing agents and the purpose 
previded the following information: 


advised of the identi 
of the interview, 


. . b6 -6 
LJ provide the following information relating to bre -6 
his pe na nierne ace personal e-mail address 
{AOL Instant Messenger) screen name 
ided b peakea a bhi psidenca 
tated that ADRIAN LAMO was 
ntly works for 
e ne 
evada approximatel be -6 
ved e ¥ bic -6 


explained that LAMO 
of a pla Q a 


, 


nternet via a dial up modem in| 
him, service was provided _b Mindspring or Erols 
certain of the provider. Do dwas unaware of when_LAMO actually 
left town, as LAMO did not communicate his plans wit! 
LAMO called__Jafter having been gone to let 


had moved on. [Cd ast saw LAMO at| 
[diast heard from LAMO approxi , be -6 
| both via AIM and cellular telephone. had not bic -6 


communicated with LAMO since then. provided LAMO'S 
telephone number 415-505-HACK, AIM “protagonist” and e~mail address 


Investigation on 09/23/2003 a Centreville, Virginia 


° i b3 -2 
File Date dictated 09/24/2003 b6 -1 
bic -1 
ty SA Ant bIE -3 
as . . 
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b3 -2 


b6 -6 

bic -6 

BIE -3 
cmimwineteosmer fn avan2003 re 2 


adrian@adrian.org. LAMO had used the password "toomanysecrets" before. 


b6 -6 
perceived LAMO as an intelligent, well-read : bic -6 


Shrugged | similar to "Howard Rourke" of Ann Rand's Atlas 


Shrugged. explained that since he can remember LAMO was 
always intelligent, but unaffected by people and things around him. 
In elementary school LAMO, was different than the other kids and 
was teased and picked on by others. However, LAMO paid little 
attention to this and the children gave up and moved onto other 
targets. 


Stated that LAMO had a strong sense of 
spirituality and morality with a "moto of not allowing his actions b6 -6 
to be guided by fear", and did not compromise computers as a bIC -6 
malicious or self-serving endeavor, but that LAMO was just curious. 
believed that LAMO usually called the company he had 
compromised or the press because he felt it was his duty to inform 
them of the vulnerabilities that existed. LAMO'S use of the press 
did not endear him to the hacker community, many within the 
community did not appreciate LAMO'S relationship with the press or 
that he shared his exploits with them. 


iO had a close relationship with 
and CD helieved LAMO andc id 
a et relations LAMO would share information with 


regarding his ex so that the compani @ aware bé6 -5,6 
i could maintain his bIC -5,6 
the exploit and not participating init. 
fete) 1S hat money was ever exchanged between 

either LAMO and[__or LAMO and| i 

may have been planning to open a 
and empioy LAMO, but was not aware of an’ 
actually start the company. 


did not have specific knowledge of LAMO'S drug 

usage but stated that LAMO has probably experimented with drugs, as 

'LAMO was a very open~minded person and not opposed to a different 
life-style. Po ddid not believe that material possessions mean 6 -6 
anything to LAMO, thus his homelessness free-flowing life-style. bic -6 
Se was aware that LAMO was Es the San 

Francisco Bay area, but did not Ww his name or 22 the 

relationship still existed. 


believed that LAMO was living off of money he had 
saved when he worked for the non-profits, money provided to him by 


FBI(19-cv-1495)-779 
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b3 -2 
be -6 


. b7c -6 
b7E -3 


and working wi ded to in network security for 
anyone who asked for help. stated th paid 
his cellular telephone bill and may have used as BS75i,6 
fo bail LAMO out of jail. LAMO has a relationship with b7¢ -5,6 
bu i i ything about his 
relationship with wa. 


called while LAMO was staying with 


t 
wa. had any sibl 7 (OUg. ere 
might aera further details provided). : 


[LL  |described LAMO'S ability to compromise computer 
systems as unusual. LAMO only used a web browser and the general 
tools avai rom the Microsoft software installed on his 
laptop. explained that LAMO would genetally just surf a 
web site and find vulnerabilities and due to his curiosity would 
continue to explore the network. There was generally no mal-intent 
when LAMO started Looking through a web site. was not 
aware of_a ial hacking tools LAMO may have installed on his 
system. did perform some repair work’ on LAMO'S laptop 
while he stayed with him, but was not sure if LAMO still had the 


bb -6 
bIC -6 


laptop or if he had replaced it with a new one. 

that LAMO have performed one compromise whild 

a (eee he did not _remembér who € victim 
Was and was sure TAMO had not done it fron[__ home. LAMO 
respected] space and beliefs against hacking. Therefore, 


LAMO must have performed the compromise from another location, 
probably somewhere he can access the Internet for free. 


was aware of the following intrusions Yahoo, New 
York Times, SBC Communications, Blogger/Google and_some consulting benc6 
agencies. was not aware of any others. did not bIC -6 
believe that LAMO compromised Levi's because he had worked there. 


[Jaia not receive a login and password for bé -5,6 
Lexis/Nexis From LAMO and did not believe chat Twoutd have b7c -5,6 
accepted something like that. 


be -3,6 
BIC -3,6 


aL sd was served the subpoena from the 


United States District Court of the Southern District of New York. bed 
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Date of transcription 11/12/2003 


telephonically at b6 -5 
resides atl] pac 5 


i — of the interviewing agent and the nature of the interview, 


rovided the following information: 


seminar was titled 


hatCADRIAN LAMO was one of the speakers a 

at this seminar. stated that LAMO was not paid for be -5 

speaking at the seminar. advised that LAMO would have had b7C —-5 
her number _t: all her, but does not recall having spoken with 

LAMO. (lees not attend the seminar and never did meet LAMO. 


ROE 


Lee Remy lee BOR 


11/11/2003 


b7E -3 


Investigation on a_ Chicago, Illinois (telephonically) 


File Date dictated 11/12/2003 


by 
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FBI(19-cv-1495)-786 | 


On 11/07/2003, the followin 


information and 
identifying data was obtained by oS a 


for 

as never 
eard of anyone by the name of ADRIAN LAMO nor_spoke to anyone 
with that name. 


1 When shown a picture of raMo.[Jadvised 
that he had never seen LAMO. 


be - 


5 
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Precedence: ROUTINE Date: 11/12/2003 


To: New York Attn: Squad DT-5 
SA 


From: Chicago 
Squad CY-2 


be -] 
approved By: [| prc =1 
peated By: [nj bre -3 


Title: ADRIAN LAMO; 
New York Times-Victim; 
Computer Intrusion; 
OO :NY 


Synopsis: Report results of interviews requested in lead listed 
below. 


b3 -2 
. . . b7c -5 

Enclosure(s): One FD-302 reporting interview of 
and One Insert reporting interview of DIE -3 


Details: A lead was received by Chicago Division from New York 
Division to conduct two interviews to inquire as to the 


interviewees’ knowledge of, and association with Adrj 
i i i located at ~ og 
and the second interview was ©) b6 -5 


b7c -5 
he had with b6 -5 
Lamo to speak at a in Washington, Dc in b7Cc -5 


7 nor seen Lamo prior to 
the interview. 


Lead 24 covered. b6 -l 
b7c -1 
b7E -3 


FDEXED. 
FHLEO. 


Lonas 
Du cube 


——— 


FBI(19-cv-1495)-788 


To: New York From: Chicago 
Re: De] 21/12/2003 


. 


LEAD (s): 
Set Lead 1: (Action) 
NEW YORK 


AT NEW YORK, NEW YORK 


Read and Clear. 


++ 


bygs*2 
b7E -3 
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Identification Number 


interviewed at the Falls Church, Virginia office o 
Bureau of Investigation, advised of the identity of the 
interviewing agent and the nature of the interview. During the 
interview she provided the following information: 


[-Jhas no personal knowledge of ADRIAN LAMO, or any b6 -5 
related persons. The phone number pase was assigned to b67C -5 
the phone line used exclusively for the family fax machine and home 


computer Internet access via modem. 
Exom 
inclusive of the telephone calT onl 


from bo -5 
ae 


erLodica een employed as an H7C -5 
&. ough she is not a She 
has not worked in[—sédi fo Gas ie pas ive years. 


Cis separated from her husband, | ana be —5 
hag_lived at her current address from the final date o @r divorceb7C -5 


inf through the present. 


The Telephone number was established by 66 -5 
(Jatter the separation in bic -5 


address. 
address fron 


Cis estranged from her 
that her husband 4} 


Investigation on at_ Herndon, Virginia 
. b3 -2 
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“thinks very logically" and spends a great deal 

of time on his computer, both programming and_spending time in chat 
rooms . is not certain what_chat rooms [| might be be -5 

involved with or "hang out" in. has had issues in the use y7c _5 

of his computer, having made International phone calls for unknown 

purposes "three or four" years ago. These calls incurred 

significant charges, including calls to the Caribbean, inducing 

Co Ito place a block on long distance toll charges. She 

suspects that this involved pornography, but had no specific 

knowledge. bé -5 


did use] computer during this period b7c -5 
although she had forbidden him to use or modify her machine. 


Fa 


a specialist_in bo -5 
working for the b7¢ -5 
periodically, and used the computer and modem on 


diverse occasions. 


, CL dis and has caused injury and b6 -5 
stress as a result. is on medication for he! b7c -5 


During access to the 


lhome . i of town for a 
perio poo Spelieves 
b6 -5 


her computer was modified in her absence. As a consequence, her 


some occasions would to 
protect it from 
undeleted a significant number of e-mails that ha 
during an absence. 


No one stayed at the| sdother than family b6 —-5 
5 


members and close friends. b7C -5 


een deleted 
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was 
interviewe 


the identity of the interviewing agent and the 
nature of the interview. During the interview he provided the 
following information: i 


L__Jnas no personal knowL i Lamo, or any bo -5 
related persons. The phone number was assigned to b7C -5S 


the phone line used exclusively for the Family © i and home 
via modem. 
has been the family home since some time in 


uring ie perio rom 


At some time during this perio: 
telephone unber| termi 
associated with the telephone number has no 
knowledge of any phone calls to this number in May of 2002, or at 
any other time during his absence from i 
address. 


number the primary phone P© “8 
,at the was the primary  b7C —5 
1 phone at the address. ok 
| v7 
a 
ar’ 
b3 -2 
Date dictated 09/26/2003 b6 -1,5 
b7c -1,5 


bIE -3 


7, 
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it and its contents are not to be distributed outside your agency. . i 
FBI(19-cv-1495)-792 | 


b6 -5 
b7C -5 


Investigation on, 


09/26/20 


Herndon, Virginia 


File 


by 


[sewn 


ew, 
rane (Rev. 10-6-95) 


A 
’ b7E -3 
Continuation of FD-302 of ) ‘ ,On 09/26/2003 ~ , Page 2 


LJ ssw —— 
both of whan 
address. 


address from 


(Jadvisea[_ hat he has no ‘knowledge of ADRIAN bo -5 


LAMO ed person, and h; wledge of any phone callb7c -5 
to in M, is a member of the 
joes not recognize the screen names| be -5 


AOL account are 


2001, he currently has Internet access through Cox Cable. 
does not_use chatrooms or Instant Message, and does 


_ mot have a website. has used America Online Instant bo =5 
Messenger (AIM) in the past. b7Cc -5 


No one stayed at chef or [==] 
LJadaresses other than family members. 
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Source, who is not in the position to testify, provided 
the following information: 


Source 


Source 
into two crowds: 
does not believe 
"bad crowd", aka 
activities. The 


months ago, the evil script kiddies declared war on the white hat 


hackers. 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 10/02/2003 


has heard of ADRIAN LAMO. Source briefly met L 


oe 


advised the computer hacking community is divided 
the “good crowd", aka white hat hackers, which 

in illegal computer hacking activities and the 
evil script kiddies, which believes in such 

two crowds hate each other. Approximately (6) 


b7D -1 


bé -5 
b7C -5 
b7D -1 
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Source, who is not in the position to testify, provided 
the following information: 


' 


Source 


Source 


a 
iar? 


(effnpr 2 5 2004 


wats 
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Precedence: ROUTINE Date: 11/24/2003 
San Diego 


From: San Diego 


Squad 19 - Cyber 
Contact: oo 
b3 -2 
approved By: [7D bé -1 


b7C -1 


Drafted By: 


bIE -3 | 


Case ID #: 


Title: ADRIAN LAMO; 
New York Times-Victim; 
Computer Intrusion; 
O00 :NY 


Synopsis: Report lead covered in San Diego. Negative 
information developed from San Diego sources regarding subject. 


Details: San Diego Cyber Squad queried technical sources 
regarding subject ADRIAN LAMO per New York's lead. Sources did 
not have positive information regarding the subject. San Diego 
considers lead covered. 
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To: New York From: San Diego 
Beg [| 12/24/2003 bs 2 
bIE -3 


LEAD (s}: 
Set Lead 1: (Info} 
NEW YORK 


AT NEW YORK CITY, NEW YORK 


Read and clear. 
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Precedence: ROUTINE Date: 12/03/2003 
To: New York atten: saT 
Squad DT-5 
From: 
Squad 3 


Contacts sa[ 
Approved By: | 
Drafted By: [ivi 
Title: ADRIAN LAMO . Ce 


Synopsis: Response to Lead #1, investigation atl sd 
Division complete. 


Enclosure(s}: Enclosed for New York are the oriqinal plus two ; 
copies of an FD-302 regarding the interview ofl Pee 


Also enclosed for New York are copies_of down loaded internet 
information from a computer owned by 


Details: On y, December 1, 2003, at approximately 11:16 
AM telephonically contacted the offices of the 
PBI, 100 Wi itol Street, Suite 1553, 
regarding [to deccedeie involvement with Adrian Lamo. 

Based upon information provided =a SA | 
res i me & case, subsequently communicating with 
SA 


Per request from New York Division, 
was interviewed regarding captioned matter. Results of the 
interview are documented on the accompanying FD-302. 


[_|consigers this Lead covered. 
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For information. 
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DATE 2-27-2010 


«1- 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 


12/03/2003 


be -5 
b7c -5 


the identity_of the interviewing Agents and the nature of the 
interview, provided the following information: 


xmerily resided at 

where laccessed the Internet using a digital subscriber 
ine ("DSL") Gonnection through Internet service provider ("ISP") 
AMERITECH, SBC. count with this ISP was termina 
or August, 2003, when loved _to his present residence 
moved because mak 
i i ived at 

Once established at his current 
residence ubseribed to the AT&T_ROADRUNNER ISP using a cane) _ 


modem. The account is under the nam: 


lived at 
born bé -5 


works with computers for b7c -5 


computers. 


aintain hi 
where 
does not have LEXIS/NEXIS access at his home 
knowledge of ADRIAN LAMO. 
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FEDERAL BUREAU OF INVESTIGATION 
Date of transcription 12/03/2003 
on Social 
Security Account_Number i bé -5 
b7C -5 
hone number. After being 
advised of the i H of the interviewing Agents and the nature 
of the interview, rovided the following information: 
received a frof_sd 
While at work accesses the Internet to b6 -5 
WSQLOUDS b7c -5 
mail addresses and 
Until March, 2 the online game 
In 2001 engaged in some online chat and YAHOO INSTANT 
MESSAGE chat. 
waild _placea calls to never 
received calls at that number ut to be -5 
b7c -5 


Ras SF Lei 


FLED. 


APR AU 20nd 


b3 -2 
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Precedence: ROUTINE Date: 12/03/2003 


From: Cincinnati 


Squad #10 
approved sy: [Jt 


Drafted By: jk 
Case ID #:] 


Title: ADRIAN LAMO; 
NEW YORK TIMES — VICTIM; 


Synopsis: Lead covered at Dayton, Ohio. 


Enclosure(s): Enclosed for New York are originals and two copies 
= ing the interviews od ae P| 
and two FD-340 1A envelopes containing 
a 


origuna. nterview notes. 


Details: In accordance_with the lead in referenced Serial, 
Cincinnati interviewed | born] Qe ad 
Security . Acco This interview is “reported 
in‘ ah “ériclos: “During the intervi. it rapidly became 
apparent that it was high] ikely thatl iad a relationship 
with the captioned subject igave the impression of being 
only minimally computer literate and denied any knowledge of the 
captioned subject. suggested that perhaps the telephone 


calls ere in Ss 
former , born Social 
Security Account Number ncinnati interviewed 


who denied any knowlédgé of Lamo. This interview is 
reported in an enclosed FD-302. Cincinnati considers this lead 
covered. 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 12/01/2003 


To: LCL. ] Attn: al 


From: New York 
Squad DT-5 b3 -2,5 
Contact: SA b6 -1 
7c -1 


approved py: [7d bre -3 
pratted ny: [ett we 


Case ID #: 


Title: ADRIAN LAMO 


Synopsis: Request to interview[ | b6 -1,6 
b7c -1,6 


Administrative: Reference telcal between writer and sal jon 
12/01/2003 


Details: On 12/01/2003, writer was_telephonically contacted by 
sal who_i that the ivisi i b3 -5 


complaint b stating that b6 -1,6 
being solacité ‘become~involved in a sexual relationship by bI7c -1,6 
ADRIAN io. 

ee, 

See” “Writer informed SA[(__]that LAMO is currently 


released on bond from the Southern District of New York. The 
bond requires LAMO to only use the computer for looking for 
employment and/or school work. 


Writer requests the [__Pivision to investigate 
this matter further. 


new - PBK A9-cv-1495)-848..| 


“To: > New York ps -2,5 
Re: 12/01/2003 . bIE -3 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription _12/01/2003 


er i, 2003 [—_____laariat security 
number [| date of birth was interviewed bé -5 
at Falis Church, Virginia regarding the captioned investigation. bic -5 
After being advised of the identity of the interviewing agent and 
the purpose of the dpectyigw t= — lerevided the following 


information: 


telephone number 
ived at that address since 


She has 


took classes at 
Florida. She studie ut 
her Associates degree. 


2 . m6 -5 


in 
id not receive 
4 , . pyc -5 
[is divorces. Her ex-tusband is {7 
has no children. 5 


is not a hacker. 


obtains her Internet connectivity from America 


Online (AOL). 


Her current_position is 

osition, worke ze me 
Visi cted hacker chat sites on one or two ore 

occaisions. does not remember the names of the chat rooms. 


In[___] Hackers discovered her identity and harassed her. She 
became somewhat disturbed that these individuals had learned her 
name, address and date of birth. She does not remember receiving 
any telephone cails at her residence. Most of her contact with 
hackers was through Instant Messaging. 


yo ot3SSd, 30% 


Investigation on 12/1/03 a Falis Church, Virginia b3 -2 
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does not know ADRIAN. id not recognize 6 -5 
his photograph. does not kno b7c -5 
She was not familiar with the names of any of LAMO's suspected 


associates. 
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Precedence: ROUTINE Date: 11/24/2003 
To: New York Attn: Squad _DT-5 
SA 
From: Sacramento 


Fairfield RA 


contact: sa[_ 


Approved By: 


Drafted By: 
Case ID #: 


Title: ADRIAN LAMO; 


New York Times-Victim; 
Computer Intrusion; 
OOo: NY 


nee Sets oe ee = ead to locate and interview, 
Reference: [| 


Administrative: Re; GroupWise e-mail correspondence dated 
9/5/2003, 9/15/2003, 9/16/2003, 11/19/2003 and 11/24/2003 


New York Division, and sal _] 
Sacramento Division, 


Fairfield RA. 
Enclosure(s): Enclosed for New York 


of Motor Vehicles (DMV) photograph of 
California Drivers Li 
Caiifornia DMV printout reflecting surrendere is CDL to 


New York sometime prior to 1997; and vehi istration 


Details: The California Law Enforcement Telecommunications 
System (CLETS 


surrendered his CDL to 
ew Yor. 


curren 
Presumabl 
iowever, no contact was made with 


address. Vallejo Police Department (VPD 
database both reflect Jeurrent address 


resides at _. 
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To: New York From: Sacramento b3 -2 


On 11/21/03_writer observed a 
Californi i i 


parked in front of 
California License 


bé6 -5 
b7¢c -5 


is registered to 
as well. 


SA ladvii sa[—_lvia GroupWise e-mail dated bé -1,3 
11/24/2003, that has been located in New York and will b7¢c -1,3 
be interviewed by Agents From the New York Division. 


Accordingly the above described lead is considered 
covered and closed. 


FBI(19-cv-1495)-862 


To: iN 2. Sacramento b3 -2 
Re: 11/24/2003 b7E -3 


LEAD (s): 
Set Lead 1: (Info) 
NEW YORK 
AT NEW YORK 


Read and clear. 


+ 


FBI(19-cv-1495)-863 


0-441 (Rev, 11-18-93} 


RORM - Return To. 


¥ trivestigauon 
26 Federal Plaza; 29rd Floor 
New York, NY 16278 


Date 


ata 08 


Accountable Number 


bé -1 
USPS Expres€ (7) Federat Express ne. a 
Checked by Packaged by 
FBI(19-cv-1495)-873 
Z RECEIPT d 
Received by | iy (- 


: 2) 
a Ae 


Date and Time Received 


iris. <9 


jaf: MAILROOM Date: f2DECS SHIPPING $4.68 
apt: MAIL ROOM Het: @.35 LBS SPECIAL $0.19 
HANDLING $0.00 


TOTAL 


34.87 


SERVICE: PRIORITY OVERNIGHT 
TRACK; 6291 3960 2270 


FBI(19-cv-1495)-874 


ALL INFSRMATICN CONTAINED b6 -1 
REIN TS UNCL b7c -1 
E 62-27-2010 


FD-159 (Rev. 5-9-88) ALL IH 
EEREIN I3 UNTLAS 
DATE 92-27-2010 


~ RECORD OF INFORMATION FURNISHED OTHER AGENCIES 


Orally Written Communication 
Gate) (date) pe -3 


is ing: (include DRUG MATTERS here.) : - 
a ee 


Information furnished from File, Serial, and Page Number: LT 7E -3 


On a continuing disclosure was initiated with 
Gate) 


and wilt be maintained until the conclusion 


(agency) 
of the investigation. 


[ination misbedtinS Has Vegas Metropolitan Police Department Detective 
b6 -1,3,7 


bIC -1,3,7 
Remarks: Detective requested the information concerning the 
interview of The Police Department is conducting an 
investigation Into not into the subject of the Bureau case. 
Case Agent of the New York Division was left a 


message concerning the dissemination. 


ae ey 
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Date of transcription 12/16/2003 : 


white male, born 


xvesiding at 
employed at 


b6 -6 
bIC -6 


telephone numbe. 

was interviewed at his place of work. After being advised of 
the nature of the interview and the identities of the interviewing 
Agents, _____]provided the following information: 


LC Jha a friend named 
and worked with_as al at_the 
Approximately spoke with be -6 


making a documentary movie about the life of ADRIAN LAMO. C7 ’7¢ -6 

ot _the idea after reading an article about_LAMO in Wired magazine. 
soneaceed (eee a] who is an Wired magazine 

and obtained an email address for LAMO. aid not recall 

the email address he obtained from 


sent an email to LAMO in which he described the 
wanted to make. After sent the 
email to LAMO, LAMO called to discuss the possibility of 
making the documentary. only remembers talking to LAMO 
one time. During that conversation,[( __Jonly spoke with LAMO 
about the documentary.[|_—s«dt did not’ Know any additional 


information about LAMO. A i £ the conversation with LAMO, 
[LJwas employed wit 


CL Jdoes not know LAMO —_ and indicated that 


LAMO acted very skittish on the phone. as never seen b6 -6 

LAMQ_and knew nothing about the computer hacks he is accused of. pic -6 
only information about LAMO's activities came from 

articles he read on the Internet and the Wired computer magazine. 


Ce i i ser. 
stated that 


(—F ie not know any of the following individuals: b6 -3,6 


documen: h n 
tary he a ee 


b7C -6 


b7C -3,6 
jaeaaorae Ve 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 12/15/2003 


Social 
was interviewed at her bé -5 
After p7c -5 


(date of birth 


Security Account Number (SSAN 


residence 
being advised of the identity of the interviewing Agent, 


voluntarily provided the following information: 


advised that she_has never heard of Adrian Lamo 
did not recognize him. b6 -5 


nd when shown a picture of Lamo, 
| has no knowledge of any of the computer intrusions « 
attributed to Lamo. She also has no knowledge of any individual b7C -S 
that may have contact with Lamo. 


[J has no knowledge of computers. She does not have 
a computer in her residence. The only computer she has routine 
access to is a computer located at her business that she does not 


use. 


owns a business, 
The business rents and sellsy7c —5 


telephone 
installed the computer at the business. 


| does not know how ould have been b6 -5 
connected to Lamo. She sevieed that | and her daughter bye -5 
date of birth telephone a ~ 
[-——1& are the only computer savvy individuals that she 
knows personally. 


oars 


Investigation on___ 12/12/2003 a Denver, Colorado . “ Pe “ 
File pate dicted 12/15/2003- re: ° DIC -1 
coms bIE -3 


by SA 


ace This document contains nei 
it and its contents are not t 


If is the property of the FBI and is loaned to your agency: 
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Date of transcription _12/15/2003 


date of birth Social 


bo -6 
bic -6 


telephone 
interviewed at the Denver FBI Office, 1961 Stout Street, Suite 
1823, Denver, Colorado. After being advised of the identity of the 
interviewing Agent,[/ _—s|J voluntarily provided the following 
information: 


is the former head of the 
The organization 


and one of[____—| responsibilities was to decide on th 
of these documentaries. While employed in that_capacit BIC ~ 
had seen media reports regarding Adrian Lamo. ber le 


contact Lamo and request his assistance in filming a ASeumentary 
about him. 


Lamo had an Interne ite which provided information 
about himself. On _that site, found an email address and a 
telephone number. does not remember the website address, . 
the telephone number, or the email address provided by the web bo -6 
site. pee sent an_email to Lamo, but does not believe he ever b7C -6 
received a response. also called the telephone number and 
received no answer, but did Teave a voice mail message explaining 
why he wanted to speak to Lamo and a return telephone number. 
ae received a return telephone call from _Lamo 4 to 6 weeks 
tater. Between March 2002 and July 2002,[___—sjestimates he 
spoke to Lamo 3 times. Each conversation was approximately 4 
minutes in length and was initiated by leaving a voice mail 
message, Lamo would then return the calIT_ has not had any 
contact with Lamo since July 2002. 


According to these conversations were purely 
logistical in nature. was trying to arrange a time and - 
place to meet Lamo. During these conversations, Lamo relayed that b6 -6 
he was currently in Philadelphia, Pennsylvania staying with a b7C -6 
friend of his that he did not identify. Lamo had previously lived 
in California and at that time was preparing to_go to New York, New 


York for a computer conference in April 2002. does not 
recall the name_of the conference. Lamo would not provide 
information to involving any computer intrusions he may 


have been involved In because he had a case pending against him. 
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Lew) cots not remember whether the case was civil or criminal 
and was not provided with any further details. Lamo told % 
that he would access the Internet by visiting stores like Kinko's 6 =) 
late at night and using their public terminals. advised b7C -6 
that Lamo was very vague about his location and where would be 

located in the future. Because Lamo was so vague,|___—_—decided 

not to pursue filming a documentary on Lamo. 


=e no knowledge of any o individual who may pE -6 
know Lamo. m addition, the only knowledge has regarding bIC -6 
any of the alleged computer intrusions committe yy Lamo, had been - 
obtained from the media. 
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DATE 02-2 b7c -1 
UAT: jat OIE ES 
Be 
F . : q be -1 
The following investigation was conducted by SA bIC -1 
and 7" (mamaria |S Denver, Colorado on December 3 
16, 2003: : 
O25. 
G5 
TE -1 
6-5 
bTEY =5 
an individual FE SL 
ocated ele 
one number IO -5 
advised that she had no knowledge an individual 2 
named ADRIAN LAMO. TLE =, 
b3 -2 
b6 -1 
beGe a1 


b7E -3 


SOAS RBA ANS 


b3 -2 
be -1 
bIC -1 
bIE -3 


2 
be -1 
coe setouing investigation was conducted by Special b7c -1 
agent on December 12, 2003: 
date of birth 
telephone cellular telephone b6 -5 
interviewe telephonically. = does no NOW ary 


4 5 
individual named Adrian a am as never had any contact with BIC -5 
him. advised that he has no knowledge regarding Lamo. 


th. 

telephone was interviewed be -5 
telephonically. does not know an individual named Adrian b7c -5 
Lamo and has never had any contact with him. LL Jadvisea that 

she has no knowledge of Lamo. 


telephone was interviewed telephonically. wg 

does not know an Individual named Adrian Lamo and has never b7C —5 

any contact with him. advised that her husband b7E -1 
Co | may have some Information to provide about Lamo. 


| g investigation was conducted by Special 
agent on December 16, 2003: 


bo -1,5 
= Gate of birth telephone; 7. -1,5 
cellufar telephone was interviewed ’ 
elephonically. does not know an indivi amed Adrian 
Lamo and has a any contact with him. pasha. Jaavised that 
she has no knowledge regarding Lamo. 
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Precedence: ROUTINE Date: 12/17/2003 


To: New York Attn: aC DT-5 
SA 


Squad 13 
contact: sal BSE 
be -1 
approved sy: [_______1¢~ bie -1 
Ee SS 
Drafted By: bie s 


Case ID #: 


Title: ADRIAN LAMO; 
New York Times - Victim; 
Computer Intrusion; 
OO :NY 


Synopsis: To advise New York Division of interviews conducted 
and lead covered. 


DPE S3 
Enclosure(s): Enclosed are the following items: 
1.) One original and one copy of an insert documenting 
investigation conducted by SA 


2.) One original and one copy 1 nt ing 

investigation conducted by SA 

3.) One original, one co and the original notes for an bo -1,5,6 
interview of b7C -1,5,6 
4.) One origin: nd the original notes for an 

interview of 

5.) One original and the original notes for an 


Details: On December 16, 2003 Denver concluded the interviews 
required of the referenced lead. Attached are the inserts and 


FD-302's (including notes) for the interviews. 


Denver considers this lead covered_and will conduct no 
further investigation. 
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FEDERAL BUREAU OF INVESTIGATION 
Precedence: ROUTINE Date: 12/18/2003 
to: [sd Attn: _ 3 
Cyber Attn: CCIU 
b3 -2,5 
From: New York bé -1 
Squad DT-5 bic 1 
Contact: SA - 
bIE -3 
approved By: [7 
prafted By: [sf 
Case ID #: 
Title: a 
New vk Times-Victim; 
Computer Intrusion; 
oOo :NY 
Synopsis: Request to open separate investigation of yao into 
allegations of soliciting a minor in the [=] piv ion. b3 -5 


Administrative: Reference EC dated 12/03/2003 tron[__—idti 
‘ Division to the New York Division 


Details: The New York Office (NYO) received the response to lead 

set to Division by NYO on December 1, 2003. Writer has 

reviewed the enclosures in the EC dated 12/03/2003 and believes 

they provide valuable information for the above mentioned 

investigation. Writer has conferred with the United States b3 -5 
Attorney's Offi j i BB -2 
advised that] 


The SDNY is currently in plea 
negotiations wit) orney for his alleged illegal 
hacking activities. The Division should be aware that 
LAMO is a highly regarded hacker in the hacker community. LAMO 
receives a great amount of publicity and has close ties with the 
media, 


The New Yo: 


Office (NYO) requests a search warrant be 
obtained to search! # 


contents of LAMO's email address 


- fo cece wtcint ou se titty tit ee bee FBI(19-cv-1495)-887 


t (To: 2 New York 
Re: 12/18/2003 b3 -2,5 


iamoa@zip. ar i and email address BIE -3 
by the Division and forward any 


any relevant information pertaining to the above mentioned 
investigation to the writer. 
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« . fo: 2 New York b3 -2,5 
Re: 12/18/2003 bIE -3 


LEAD (s): 


Set Lead 1: (Action) 


=] 
Open separate investigation into the allegations that 


LAMO is soliciting a minor over the internet. Obtain search 
| warrants for the contents of LAMO's email address 


jamoa@zi and>_ Jemail address b3 -5 
Report any pertinent results to the b6 -3 
| QO. bic -3 
Set Lead 2: (Info) 

CYBER 


AT CCIU 


Read and clear. 


++ 


FBI(19-cv-1495)-889 


Ee 


(Rev. 01-31-2003) : 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 12/22/2003 


To: New York Attn: SA 
Squad DT-5 . + 


From: Washington Field 
CR-17/NVRA 


Contact: = sa[ 
approved By: [" et lod 
Drafted By: tk, 
Case ID #: 

Title: ADRIAN LAMO; 
NEW YORK TIMES - VICTIM; 
COMPUTER INTRUSION; 
OO :NY 


Synopsis: To report interview results. 


ear ee ==] 


Enclo: : 


Details: All interviews assigned to the Washington Field Office 


(w. bove captioned investigation and as detailed 
in of the case file have been completed with 
the exception of the interview. 

The interview of LO Jwas previously 


submitted under a separate Communication. 


WFO requests more detailed information be provided by 
the New York Office regarding thel sj intterview. 


WFO considers all leads regarding this previously 
assigned matter covered. 


i om 


b3 -2 
b6 -1 
b7e -1 
bTE -3 


BIE -3 


FBI(19-cv-1495)-890 


To: New York From: _ Pield 


bIE -3 


LEAD (s) 
Set Lead 1: (Discretionary) 


NEW YORK 


AT NEW YORK, NEW YORK 


Determine if the interview of LC Cidiiss still Bes > 
required. If so, provide WFO with detailed information regarding b7c -5 
El involvment in this matter and interview questions. 


+ 


FBI(19-cv-1495)-891 


ALL INF 
FD-302 (Rev. 10-6-95) EEREIN 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 20/28/2003 


account number 


residence, phone number 


born| acral social security 
was interviewed at his place of b6 -5 
ing Agents 


| After being advise enti or the interview: 
and the nature of the interview, Jprovidea the 
following information: 


b6 -5 
usiness titled bic -5 

—., not recognize the picture of A IO 
provided. LAM Gd not look familiar to him. also be -5 


reviewed a list of names that the New York Division of the FEDERAL 7c -5 
BUREAU OF INVESTIGATION (FBI) provided for the interview. None of 
the names on the list looked familiar to him. 


[nas never been contacted by anyone named LAMO LM 
or claiming to have information about him. Pe _[eouta not ia 
think of any reason why LAMO would have taken personal information be -5 
about him. bic -5 

. = = be -5 
knows about this man because he is occasio: i pic -s 
contacted by collection agencies looking for the other 
in 
: has been contacted by the collection agencies 
at different times over the last few. years and as recently as last 
week.’ He has been called about a visa credit card and also 
student loans from MICHIGAN STATE UNIVERSITY. 
b6 -5 
never attended MICHIGAN STATE UNIVERSITY He bic -5 


attended] 
the years of 


Ld was also called uit a year ago be -5 
looking to buy pharmaceuticals from al The bIc -5 


person on the phone stated that there was a we 


Investigation on 10/27/2003 at _Wales, Michigan SERAUZED tgp, — pe 2 
File # aah. 1ApRES 2094 b7C -1 
Jin bTE -3 
w_s t— ua 
‘This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is Toaned to your agency, Na/993 


it and its contents are not to be distributed outside your agency. 


FBI(19-cv-1495)-892 


FD-3022 (Rev. 10-6-95) 


b3 -2 
be -5 


bIE -3 
Continuation of FD-302 of On 10/27/2003 » Page net 
his name, phone number and selling pharmaceuticals. 
believes that the other one 4 
advised that the only time he has been to New ieee 
York recently was i He visited some friends in 
(ee where he went bear hunting on the property of 


his friends. 


. FBI(19-cv-1495)-893 


FD-302 (Rev. 10-6-95) 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 12/01/2003 


b6 -5 
phone number was interviewed at the FEDERAL BUREAU, JC _s 
OF INVESTIGATION (FBI) MACOMB COUNTY RESIDENT Acency office at 44200 Garfield, 
Suite 250, Cli i Michigan. Also present during the 
ee es ee 
Ld s«oAfteP Hing advised the identity of the Interviewing Agen! 
and the nature of the interview, fr peoided the following 
information: : 


alsob6 -5 
known as is the closest person to at all timesy7c —5 


and has worked closely with him for the past four years. La the 
a at home in[ _] and when he travels. 444) 
would i iti know if anyone has tried_to approach 

or contact! go 1) 
through prior to reaching 


[_Jaia not recognize the picture of ADRIAN LAMQ.[ could 


not recall any correspondence with someone name anyone 
indicating they may have personal information about] be 
b7c -5 


also did not recognize any of the names on the list 
provided by the New York FBI office. [_]did not believe that he 
has ever heard the name ADRIAN LAMO. 


Investigation on 11/25/2003 a Clinton Township, Michigan 


This document contains neither recommendations nor conclusions of the FBL It is the property of the FBI and is loaned to your agency; 
it and its contents are not to be distributed outside your agency. 


1 cee eee 


med : Date dictated 11/26/2003 b7c -1 
b7E -3 
w sat 


FBI(19-cv-1495)-894, 


(Rev. G1-31-2003) 


. 


ION SSNTRINE? : , @ : BOS jlnoH. en 


IDLASST 


BIE 02 0 eL yee BRW/DXVRYS : bé6 -1 
FEDERAL BUREAU OF INVESTIGATION : b7c -1 


Precedence: ROUTINE Date: 12/01/2003 


From: Detroit . 
Macomb Co: RA 
‘Contact: 
b3 -2 
approved By: [ON bé -1 


bIC -1 


Title: ADRIAN LAMO; 
New York Times-Victim; 
Computer Intrusion; 


00 :NY 
Synopsis: Advise the completion of lead and return of the aye] 
appropriate documentation. : . ‘2 


Enclosure(s): 1,- Original and two copies of FD-302 documenting 
the interview of 
2 


Details: On October 27, 2003, SA jand SA ~ b6é -1,5 
interviewed at his place of p7c -1,5 
residence. was unable to provide any information ' 


about Adrian Lamo- , 


Adrian Lamo. 


the interview of[ was not completed. pg 1,5 


The interview mot being doné was discussed with DIC —1,5 
SA in a prior conversation. - 72 


"FBI(19-cv-1495)-895 


To: ; Detroit 
Re: 12/01/2003 


LEAD (s) : 
Set Lead 1: (Info) 
: NEW YORK 


AT NEW YORK CIty, NEW YORK 


Read and Clear. 


had 


b3 -2 
b7E -3 


FBI(19-cv-1495)-896 


) @ FBI(19-cv-1495)-897. 


(ees 


L INFORMATION 
REIN 18 URCLA 
TATE 92-27-2010 UE 32 2Y5 b7C -1 


From: 
To: 
Subject: EC for Lamo 


| understand thal__—_—from our press office has asked you to direct this inquery to me. As per 

our conversation, regarding reporte[_____ asking for Freedom of Information on the above b6 -1,5 
mentioned investigation, | have attached the EC as discussed providing details of the investigation for b7C -1,5 
your information only. This EC is not to be released to anyone outside the FBI. Also, the investigation is . 

still ongoing so no information should be released at this time. 


As | requested in our telephone conversation, if you need to send any information or correspondence out 
regarding this investigation please contact the NYO before it is released. 


for your assistance in this matter, 
bé -1 


— -FBI(19-ev-1495)-898- 


_ i  ] @ FBI(19-cv-1495)-899 


“FD-112 (Rev. 08-28-2002) r-201e B C BBWS IS RY, b6 -1 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE . Date: 12/01/2003 


To: Investigative Technology Attn: Cree Biectroniic bé -1 
Surveillance Technology p7c -1 


Section, EST-3 
Telecommunications Intercept 
and Collection Technology 
Unit, Quantico ERF 


From: NYO 
Squad DT-5 
Contact: SA b3 -2,4 


appeoved ays [WEE bie “1 
pratted sy: [iE ms 
case pes [OO] ° 


Title: PEN REGISTER/TRAP AND TRACE USAGE 


Synopsis: Pen Register Original order. 


Details: In accordance with MIOG, Part II, Section 10-10.7, the 
following information is being furnished: 


Court order numbed b3 -4 


+ 


og wet. 


ce mene create tie caress eos te PBI] O-6¥-1495)-900- 


(Rey, 01-31-2003) RES be -1 
FEDERAL BUREAU OF INVESTIGATION Rigs? 
Precedence: ROUTINE Date: 12/24/2003 


vto: New York Attn: Sq = 
SA 


From: Minneapolis 
Squad 8 
Contact: SA 


Approved By: 


B32 
bé -1 
b7G. -1 
Drafted By: mwl bIE —3 
Case ID #; 
Title: ADRIAN LAMO; 
New York Times-Victim; 
Computer Intrusion; 
OO :NY 
Synopsis: Lead covered. 
s b3 -2 
Details: chat Be he 
he resided at ne a 


advised that he was 
Tast spoke with on 10/16/03 when DIE -3 
allied from a pay phone in St. Paul.[7]|has not _been 

ouse since June, 2003.L_—sresided with his[ fat 

the above address while attending college. 


ot have a way of contacting|____Jand does not b6 -5 


know where is currently . Writer left a contact b7c -5 
number for © pass along to if he has contact with him 


in the future, 


b3 -2 
y pa bé -1 
pyc -1 

ee bIE -3 


FBI(19-cv-1495)-901 


To: New York From: Minneapolis b3 -2 
Re: Ld 12/24/2003 
DIE -3 


LEAD (s)} : 
Set Lead 1: (In£o} 
NEW YORK 
AT NEW YORK 
Minneapolis Division considers this lead covered. If 


any additional information is developed concerning this lead it 
will be forwarded to New York. 


+ 
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FBI(19-cv-1495)-903 
ft 


‘ e | e 


US. Department of Justice 


Federal Bureau of Investigation 


ALL INFO 
_ HEREIN I 
DATE 03-01 bé -1 
bic -1 
+ Office of the General Counsel Washington, 0.C. $0555 . 
October 7, 2003 
Re: Request to Preserve Evidence 
Sr . This follows up the September 19th FBI letter from our New York Office | 


directing you, pursuant to Section 2703(f of Title 18, United States Code, to preserve records 
and materials pertaining to Adrian Lamo. After consultation with our New York Office, we 
have determined that Section 2703(f) does not apply to you under the circumstances presented in 
this case. We regret this misunderstanding aid any inconvenience that it may have caused you. 


We ask, however, that you voluntarily take appropriate action to preserve relevant 
records and materials. Notwithstanding the incorrect reliance on Section 2703(f), the New York 
letter was an earnest effort to alert you that any materials pertaining to Adrian Lamo in your 
possession might be of evidentiary value. Since Mr. Lamo allegedly targeted several computer 
networks belonging to the news media during the course of his illegal activities, records and 
materials probative of this activity may be of significant assistance in bringing 
Mr. Lame to justice. Mr. Lamo's victims, including members of the media, share with the FBI a 
common interest in ensuring that no investigative avenue is foreclosed by the inadvertent 
destruction or loss of relevant materials. 


Hence, we seek your continued cooperation in our investigative-effort. FBI 
personnel will be in further communication with you to determine whether we can reach a mutual 
agreement on how best to serve the respective professional obligations of you and the FBI while 
advancing the investigation, In the interim, again, we regret any inconvenience that the original: 
preservation letter may have caused. . : , 


Sincerely yours, 


Dep. Dit, 
Chlet ot 
Stati, 
Gt, of Gen. 
Counsel 

Ass\. Diz 


‘Crim, tw, 1 
cis 1 
Finance 


fnfo. Res. 1 


FOO, 


FBI(19-cv-1495)-904 


Administrative note: 


Letter bé -5 
bic -5 


FBI(19-cv-1495)-905 — 


a | 


| 


ALL INFORMATICN CCHTRINES 
REREIN TS UNCLASSIFIED eto 
ha + ORTE 93-01-2010 s¥[/ Js 3 
For Further Instructions See: MAOP, Part II, Sections 3-5 thru 3-5.3. a 
PROPERTY CODES RACE CODES JUDGMENT CODES 
1 cash A Asian/Pacific sander ©) Consent Judgment 
62 Stocks, Bonds or Neyo. Instruments B Black £0. Goait Ordered Setement 
03 General Retail Merchandise { IndisntAmerican * "DE Default Judgment 
04 Vehicles UW Unknowo DI Dismissal 
0S Heavy Machinery & Equipment Ww White JN Judgment Nonwithstanding 
% Averitt X Nonindividea MV Mixed Verdin 
57 ewehy . 1 SV Sasmary tudament 
os Vessels: AGENCY CODES: e VD Verdict for Defendant 
03 Anz, Antiques or Rare Cotecions See YP Verdier for Panne 
11 Reat Property AFOIS Air Force Office of Special Investigations 
20 Al Other ACIS Atty Criminal investigative Seaview n* “IUbICIAL OUTCOME 
BATF Bureau of Ateohat, Tobacco & Firearms: as * 
SENTENCE TYPES BIA. Bureavof Indian Affi AG Ayscement 
DCA Defense Contract Audit Agency BR BatdRemoved 
CP Capua Punishment DGIS Defense Criminat Investigative Service i CC Givi Comempt, 
JS Jail Sentence DEA ——_ Drug Enforcement Administration . ~ DE Disciptinary Charges 
LP Life Parole, boc Deparment of Corrections FL Fine 
LS Life Setence DOF Dept of Inerior © PL Pretiminary Injunction 
NS No Sentence (Subjoct is a Fugitive, EPA Environmental Protection Agency PR Temporary Restraining Order 
ofan, has Died, or isa iy EAA Federal Aviation Admicistration| PS Predfiling Settlement 
Corporation) EDA Food and Drug Administration RN Restitution 
Pa Probation FHS Dept of Heaih & Human Services SP Suspension 
S¥ Suspension of Jail Sentence HUD Dept. of Housing & Urban Development VR Voluntary Resignation 
Yo Youth Correction Act TNS immigration and Naturalization Service OT other 
TRS Internal Revenue Service 
PELP CODES NASA Nail Acrorautes€ Space Admin pave coves 
NBIS Nat'l NARC Border Interdiction 
22 Counterfeit NCIS Naval Criminal Investigative Seevice COC Cocaine 
Stocks/Bonds/Currency! RCMP Royal Canadian Mounted Police: HER Heroin 
Negotiable instruments SBA ‘Small Business Adniinistration é HSH Hoshish 
23 CounterfeivPirsted Sound USBP USS, Border Patrol 7 KAT Khat an 
‘Recordings or Motion Pctres USCG US Coat Gaerd iso isp 
24 Bank Theft Scheme Aborted USCS US. Customs Service MAR Marijuana 
25 Ransom, Extortion or Bribe USDS US, Depanmment'of State MDM Methytenedioxymethamphotamine 
Demand Aborted ‘USMS: U.S Marshals Service MET Methamphetamine 
26 Theft Feom or Fraud Against USPS US. Portal Service MOR Morphing» 
Government Scheme Aborted USSS USS. Seeret Service OPM Opiut 5S 
2? Commerciat or industs USTR «US. Treasury OTD Otter drugs * 
‘Theft Scheme Aborted Loc Local 
30° AllGiter cay Giy DRUG WEIGHT CODES 
COUN County 
Shy State me GM Grams) 
‘OTHR: ‘Other KG Kilogeam(s} 
Liters) 
ML Millilites(sy 
P Piant{s) 


DU Dosage Unitis) 


* SUBJECT DESCRIPTION CODES 


ORGANIZED CRIME UNION MEMDERS ae Continuation of GOVERNMENT SUBJECTS 
SUBJECTS 
SD President 6S Locat Leyistator 
FR Boss SE Vice-President ST Local JadgeMagiouate 
1G Underboss SF Treasurer GU Local Prosecutor 
I Consigtiere SG Secreiary/Tressurer 6¥ Local Law Enforcement Officer 
WU Acting Boss SH. Executive Board Member av 6p 
IX Capodecina St” Business Agent State Law Enforcement Officer 
Soldier Si Representative 6Q State- All Orhers 
5K Organizer 6R Mayor Local - Ail Others 
KNOWN CRIMINALS St Business Manager 6% County Commissioner 
SM Financlat Secretary 6¥ City Councilman 
2A Top Tenor 0. Fugitive SN Recording Seesetary 
2B Top Thief SP Office Manager BANK EMPLOYEES 
20 TopCon Man SQ. Cleek 
SR Shop Steward 7A Dank Officer 
FOREIGN NATIONALS 3S Member 7B Bank Employee 
ST Trustee 
3A Legal Alien SU Other OTHERS 
3B egal Alien 
3C — Foreigo Official Wout GOVERNMENT SUBJECTS 8A All Other Subjects 
Diplomatic immunity (GF. 6G, 6U- Inclade Agency Code) * 8B Company or Corparation 
3D UN. Employce Wrout 
we Diplomatic immunity 6A _ Presidential Appoigtee ‘CHILD PREDATORS 
3B Fareige Student 6B” US. Senator/SiatT Bp Bp ae 
3F Alt Gthers SC US. RepresentativerStatt 9A Child Core provider 
8D Federal Judge/Mogistrate 9B Clergy 
‘TERRORISTS SE Federal Prosceutor C Athletic Coach 
GF Federal Law Enforcement Officer 9D Teacher/Aide 
4A Known Membar ofa 6G Federal Employee - GS 13 & Above 9E Law Enforcement Personacl 
‘Terzorist Organization SH Federal Employee GS 12 & Below SF Counsefor 
4B Possible Terrorist Member 8} Governor 9G Relative 
Lt. Govemor SH Stranger 
‘State Legislator Other 
State fudge/Magistrate % 5 + BI -2y 
State Prosecutor * 66 <18 
bie -1 
BIE -3 
x 
~ 


FBI(19-cv-1495)-906 


FD-515 (Rev. 7-16-02) 


Squad supervisor approval 


ALL INFORMATICN SCNTAINES 
SEREIN TS UMCLASS 


1-201 B 
aAscomp 


OTL 


GW ecccistne’ must be feported and loaded into (SP, 


within 30 days from date of accomplishment) 


Date Prepared tlaoloy 
Date Loaded 
Initials 


(please initial) Data Loader’s b3 2 
Accomplishment involves: - 
(check all that apply) Investigative Assistance or Technique Used bic -1 
1-Used, but did not help 3 - Helped, substantially 
Drugs 
ren it a 2-Helped, minimally 4- Absolutely essential bIE -3,8 
‘ugitive Oo For Sub. invest. Assist. by other FO (s) indicate A,B,C,D for corresponding FO. 
omputer muse Lao, Div. Exar WSO - GroupT Ft Monit 
Corzuption of Public Officials - 
Money Laundering oO [Lab. Field Sup [UCO- Group It For. Lang Asst. 
Sub invest Asst by FO() [Pen Registers | luco- Net Back Non FSI Lab Es| 
Photo Cover. | INCAVE/ Vi -CA fgt-Witn Coor 
Asst, FO(s)__, _. _, i 
AB, 6, D [Polygraph |CrimiNS Intel Ass HO Wanted Flyer 
= [Searon Warren Crisis Neg. - Fea SARs 
fask Force [Show Money [sis Neg, - Loc ART 
Jsocass. | [ERT Asst. isset Fort Prog 
Swat Team | Jeute - 17 ‘ori Support Pro} 
ech. AgEauip| |sav- iro 
Name: Phone Toll Red Pos - ITC 
A. Complaint(information indictment F. Conviction J. Civil Rico Matters Date: 
(federal 1] Local 1 international (efederal C1 Local Also Complete “Section G" 
Complaint Date: Conviction Date: Other Civil Matters Date: 
Check if Civil Rico Compfaint I] Judgment ———' bE -8 
. . Judicial Outcome x 
Information Date: _ For 6F, G, H-Include Agency Code Amount §. 
Indictment Date: i 
y wren or DD) Misdemeanor Suspension: Years Months 
B. Locate/ Arrest Plea or That 
( Federal [ Local [1] International stato: NY Jucicia Distice SONY | K. Administrative Sanction Date: 
Subject Priority: GA OB OC Subject Pescription Code _ 
Locate Date: G. US. Code Violation ype ‘ ength: 
° Regubed for centers AB Rand J 1 Suspension [ Permanent 
Arrest Date: lequired for sections A,B,Fan DD Debvarment or 
D Subject Resisted Arrest {Federal Only) ; © Injunction Year. Months 
1 Subject Arrested was Armed ia ne) Oo # a 
L. Asset Seizure Date: 
. Summons Date: Asset Forfeiture Date: 
OFederat Local CATS # Mandatory 
— Citcle below one of the three asset forfeiture: 
D. Recovery/Restitution/PELP X Admin, Civil Judictal, of Criminal 
©) Federal [] Local []Internationat Do not indicate $ value in Section D 
Recovery Date: 
H. Sentence Date: 
. M. Acquittal/Dismissal/Pretrial Diversi 
Code a, Amount $. Sentence Type: 7 ea a meee retrial Diversion 
Code Amount & in dail Years, Months (circle one) Date: 
Restitution Date: Suspended: Years. Months ; 
(Court Ordered] Pretrial Diversion Probation: Years Months N. Drug Seizures Y Dates 
. . — Drug Code * 
Code v Amount §, Fines: $ pcg Gade Sole 
PELP Date: gl rode 
Code *__v¥ Amount $, FOIN 
1. Disruption/Dismantiement: “ Do not indicate $ value in Section D 
E, Hostage(s} Released Date: Disruption Date: ©. child Vistim intoxmatn 
Released by: []Terrorist 1] Other . Child Victim information 
Number of osiagee: a Dismantlement Date: Chitd locatediidentitied Date: 
Completion of FD-515a Side 2 Mandatory D Living 7 Deceased 
P. Subject Information - Required for all blocks exeluding block D (Recovery/PELP), blocks E, |, L, and N. 
/___Name [Race *] Sex | Date of Birth | Social Security No. (available) 
ALAR [us [aa Zoro Y- Td (B04 


For indictments/Conviations ily: 
[1 Subject related to an LON, Asian Organized Crime (AOC), italian Organized Crime (100), Russian/Eastern European, Caribbean, of Nigerian Organized Crime Group - 


Complete FD-515a, Side 1 Blocks A-E mandatory, F-H as appropriale. 


Complete FD-615a, Side 1 Blocks A-C only. 


Subject related to an OC/Drug Organization, a YCMO Program Nalional Gang Strategy target group, or a VCMO Program National Priosily Initiative target group - 


X Additional information may be added by attaching another form or a plain sheet of paper for additional entries. 


See codes on reverse side, 


8 No. of FO-515 


¥ Requires that an explanation be attached and loaded into ISRAA for recovery over $1m and PELP over $5, disruption, dismantlement. and drug seizures. 


FBI(19-cv-1495)-907 


b3 -2 


age. 1 e b6 -1 
IRIE 03-01-2910 BY 2 BR “RYS - 
01/22/2004 TE 4 bi-enle BY es ok RK kkk ee RE INFORMATION eKeeHK DIC 1 
SENSETIVE—/ ‘UNCLASSIFIED DIE —3,8 
Case Number: Ld Stat Agent Name: 
Serial No.: Stat Agent SOC.: 
Does Accomplishment Involve Assisting Agent 
Drugs... . 1... 1 ee ew tc tN 
A Fugitive. .. eee ee ee TON 
Bankruptcy Fraud. eee ee eT ON 
Computer Fraud/Abuse. . . iN 
Corruption of Public Officials: N 
Money Laundering. ......:WN 
Sub. Invest. Asst by Other FOs: a 
2 
Investigative Assistance or Technique Used 3 
awe eee 4 
FINAN ANALYST ‘AB DIV EXAMS SCO-GROUP I EL. MON-NRCSC 
IRCRAFT ASST ‘AB FIELD SUP UCO-GROUP IT FOR LANG ASST 
COMPUTER ASST PEN REGISTERS UCO-OTHER INON FBI LAB EX 
CONSEN MONITR PHOTO COVERGE NCAVC/VI-CAP VICT-WITN COOR 
IELSUR/FISC POLYGRAPH CRIM/NS INTEL TO WANTED FLYR 
ELSUR/LIT ISRCH WAR EXEC CRIS NEG-PFED SARS 
NG FIELD SUP SHOW MONEY CRIS NEG~LOC CART 
ENG TAPE EXAM ISOG ASST ERT ASST ASSET FORF PRO 
ILEGATS ASST. ISWAT TEAM BUTTE-ITC FORF SUPPORT P 
IEVIDNCE PURCH ECH AG/EQUIP SAVANNAH-ITC 
INFORMANT /CW BI, TOLL RECS POC-WRCSC 
Information is for Federal, Local, or International (F/L/I)}....: F 


Serial Number of Information.......... 0.0 c eee eee eee eee eet 


Title Section counts 


ADRIAN LAMO IS A WHITE MALE, DOB:02/20/1981, SS#:042-74-6804 
FEDERAL INFORMATION WAS RECORDED ON 01/08/2004 FOR VIOLATING US CODE 
VIOLATION TITLE 18 SECTION 1030 ON ONE COUNT 


* —SENSEPEVE-/ UNCLASSIFIED 


FBI(19-cv-1495)-908 


aPage , L 


01/22/2004 


a ss AN, 


KKERKKEEEKEREKK CONVICTION #e eek eK EY. 


1S 


b3 -2 
be -l 
b7c -1 


Case Number 
Serial No.: 


Dees Accomplishment Involve 


Drugs... . 2... 

A Pugitive. .. se ee 
Bankruptcy Fraud. toe eee 
Computer Fraud/Abuse. 


Corruption of Public Officials: 


Money Laundering. ..... 


Sub. Invest. Asst by Other FOs: 


Investigative Assistance o 
LAB DIV EXAMS 
LAB FIELD SUP 
PEN REGISTERS 
PHOTO COVERGE 


FINAN ANALYST 
AIRCRAFT ASST 
COMPUTER ASST 
CONSEN MONITR 


ELSUR/FISC POLYGRAPH 
ELSUR/III ISRCH WAR EXEC 
ENG FIELD SUP SHOW MONEY 
ENG TAPE EXAM SOG ASST 
LEGATS ASST. SWAT TRAM 


EVEDNCE PURCH 
INFORMANT /CW 


Date of Conviction (MM/DD/yyyy 


Federal, Local, or International (F/L/I) 
Felony ox Misdemeanor (F/M) .- woe 


Plea or Trial (P/T) ..... 
Judicial State. none 
Judicial District .... 


Z2ABZ2Aae 


ITECH AG/EQUIP 
TEL TOLL RECS 


SENSITIVE / UNCLASSIFIED 


Stat Agent Name: 
Stat Agent SOC.: 
Assisting Agent 


1 
2 
x Technique Used 3 
eon 4 
WCO-GROUP T. MON-NRCSC 
IWCO-GROUP II ‘OR LANG ASST 
CO-OTHER ON FBI LAB EX 
CAVC/VI-CAP ICT-WITN COOR 
RIM/NS INTEL © WANTED FLYR 
CRIS NEG-FED ARS 
CRIS NEG-LOC ‘ART 
RT ASST SSET FORF PRO 
UTTE-ITC ‘ORF SUPPORT P 
ISAVANNAH-ITC 
POC-WRCSC DIE -8 


01/08/2004 


a rs NY 
soe ee ee ee et SDN 


U. 8. Code Violation(s) 


Title Section counts 


bI7E -3,8 


ADRIAN LAMO IS A WHITE MALE, 


DOB:02/20/1981, SS#:042-74-6804 


FEDERAL CONVICTION WAS RECORDED ON 01/08/2004 FOR VIOLATING US CODE 
VIOLATION TITLE 18 SECTION 1030 ON ONE COUNT 


FBI(19-cv-1495)-909 
| 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 01/21/2004 


Cyber 


From: Sacramento 
Squad 012 


b3 -2 
Contact: §. oan 


b7c -1 


Approved By: bIE -3 


Drafted By: b Q 


Case ID #: 


Title: Adrian Lamo~ 
New York Times - Victim; 
Computer Intrusion; 
00: NY 


Synopsis: Report of lead covered in Sacramento. 


b3 -2 


Administrative: Re telcall between saLS™~™~—CC#dan@ SA b6 -1 


on 01/08/2004. p7C -1 
Details: Per writers conversation with sa[__ Jon 01/08/2004, b7E -3 
the subject has taken a plea agreement and has pled guilty to the 
charges in the above captioned case. Per SAL writer will 
discontinue attempts to locate the interviewees. 


To i h 
interviewed. is currently in| 
across seas and not available for an interview. 


is currently in address wa pees 
and was not present for an interview. CHS 
ocated at the address 
@ he 
were not associated with the subject. 
and relocated and were not interviewed. 
Sacramento considers this lead covered. ‘ 
is wn OES 93-2 
: . -1 
ae a 
JAN bqIC -1 


UPLOMDED ae i. °F 


FBI(19-cv-1495)-910 


To: Sacramento 
Re: 01/21/2004 « 


LEAD(s): 
Set Lead 1: (Info) 
NEW YORK 


AT NEW YORK, NEW YORK 


Read and clear. 


Set Lead 2: (Info) 
CYBER 


AT Ccriu, DC 


Read and clear. 


+ 


b3)-2 
bIE -3 


FBI(19-cv-1495)-911 


FD-302 (Rev. 10-6-95} 


Hoste | Sy 


FEDERAL BUREAU OF INVESTIGATION 


Date oF transcription 01/14/2004 


date of birth Social Security b6 -6 
Number residing at D7C -6 


was interviewed at his residence. After being advised of the 
of the interviewing agent and the purpose of the interview, 
provided the following information: 


was advised that his personal information may have 
been stolen from the Lexus/Nexus database by a computer hacker. 
was sh otograph of the hacker and asked if he 


recognized him. ‘en ee the person in the photo as ADRIAN 
LAMO and advised that DAMO was a friend fc ee | 


computer interests website 


[—Jaavisea tnat 1 2 
over the last few years and had on a few. 


occasions. advised that he believed LAMo was oriqi iy frb6 -5,6 
i that LAMO never paid him money to b7C -5,6 


gaid LAMO had 


contacted| 


as recently as 


b6 -5,6 
for six yearnjc -5,6 


xojects that were 


security office and inform them of this intervi 


WUT bh3 -2 
SERIALIZED, mn Que) 7 
Investigation on 01/09/04 Moorestown, NJ ns 6 -1 
File # Sais clades WM 8 2004 7c -1 
i 7E -3 
Pit = NEW YORK ; 
| 
a 
This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; 
il and is contents are not to be distributed outside your agency. 
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FD-302 (Rev. 19-6-95) 


by SA 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 01/14/2004 - 


Date of birth Social b6 -6 
Security Number residing at b7c -4 
iseaceeerar telephone was interviewed on 
01/14/2004. 


After being advised of t identity of the interviewing 
agent and the purpose of the interview 


information: 
was asked 7 é knew or had ever me 


LAMO in 1999 while 


provided the following 


ADRIAN LAMO. 
attended 

added that he met LAMO through 
who introduced LAMO as a friend 
was a close friend_of his in 

had first met LAMO online. advised _that he, 

and LAMO would "hang out" together when 
advised that he had not seen LAMO in over 


advised that 


would not allow LAMO 
ed that LAMO and he had 
a common interest in Computers and that DAMO had expressed an interest 
in computer hacking. LAMO never asked to us computer since 
he had brought his own lap top whe 
recall LAMO ever hacking while he 
that LAMO never asked him to hack or break the law. 


tl taiked withL on several occasions aboib6 -5,6 
LAMO. told_———siit hat’: whe _Knew LAMO had been arrested aib7C -5,6 
was confined to his parent's house. advised tha had 

and was @ 

was unsuré Was Sta in 

i il from LAMO approximately 
provided this 


Investigation on 01/14/04 at i iy 
Fite # Date dictated” 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the PBI and is loaned to your agency; 
it and its contents are not to be distributed outside your agency. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 01/14/2004 


Date of _birth Social ng -6 
Security Number residing at DIC -6 
[—] was interviewed at her place of employment. After being advise 


of the identi of the interviewing agent and the purpose of the 
interview provided the following information: 


CL] was asked if she knew or had_ever met ADRIAN LAMCb6é -—5,6 
confirmed that she knew of LAMQ through] wh7c -5,6 

had met LAMO while he was attending ' 
had met LAMO through his high school friend 

was shown a picture o a confirmed 

it was the same individual he had met . advised that] 
was the same age @ and had met LAMO onli: i 
was in high school in 1 added that she knew 
father had worked for the| 
advised that 


as a 
While in high school and during the same time he 
was in contact with LAMO. 


advised tha[_———C—CC J Hac’ Laken’ a ew computeb6 -5, 6 
courses while in high school, but did not have formal training or wom,7c -5, 6 


bat[ was a L 


and majored in 


be contacted at 


cellular phone number[__ 


advised that LAMO had stayed over her house two m6 , 
three times between 1999 and 2000. LL couid not recall the CXAQIC _5 6 
dates but characterized the visit _as being high school friends whu ~ r 
stay over at a friend's house. added that she knew LAMO to be 
a couple years older than and it was odd LAMO was 
traveling by himself with no purpose. pe new LAMO had_ resided 
somewhere in California and knew he had_also stayed ove 
residence on occasion. LAMO informed that he did computer 
security work for several companies. did not recall which 
companies LAMO worked for but added that_LAMO told her he tested their 
computer systems for vulnerabilities.[/  Jhad not seen LAMO ro 


peiehane added that he had not telephoned her residence for the 


Date “| 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is 
it and its contents are not to be distributed outside your agency. 


-5,6 


Investigation on 


01/09/04 


_ Bile # 
SA 
SA 


by 


FBI(19-cv-1495)-914 


CS 


, y 
- e r 
(Res 08-28-2000) 


FEDERAL BUREAU OF INVESTIGATION 


y BLL IE ISH TONTRINED 
EEREIN 
DATE 03-4 be -1 
bic -1 
Precedence: ROUTINE Date: 01/21/2004 
Tor New York acta: sat] 
Squad DT-5 


From: Newark 
FTRA-2 b3 -2 


approved ay: [+d pre 1 
Drafted By: CO Jar 


Title: ADRIAN LAMO; ‘5, 
New York Times-Victim; 
Computer Intrusion; 


oO: NY — 

. . b3 -2 
Synopsis: Forward results of Newark leads 1 and 2 in referenced b6 -6 
communication. pic 6 


Reference:[_ bIE -3 


Enclosure(s): Enclosed_for New York is one original and co of FD- 

3026 for interviews of[—— ee 
and includes three 1A envelopes with original notes. 

Details: On 01/09/04, the writer interviewed] __—srdlanaf[D_] b6 -5,6 
set in Newark leads 1 and 2 in referenced New York communicationb7C -5,6 
In each instance, both individuals knew of ADRIAN LAMO from when he 
stayed at their homes, however, it was their who first knew 

LAMO and associated with him. had 

met LAMO online sometime in 1999 _ and befriended him. 

had invited LAMO to stay at the 
and 2000. T ‘s visit to the 
captioned in| i i 
high school fri also met 
LAMO throug: 
interviewed with results set fort 


be -1,5 
Newark still has leads 3, 4 and 5 outstanding for b7C -1,5 
referenced communication_and will forward results as available. b7E -3 


Newark will interview at New York’s request. 


SERVLIZED i SOEXED. 


a Zan 


wh ShiL 2 6 B02 


fy fund 


FBI(19-cv-1495)-915 


one ® 


LEAD, (s): 

‘ 

Set Lead 1: (Information) 
NEW_YORK 


AT NEW YORK, NEW YORK 


Read and Clear. 


+ 
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FD.302 (Rev. 10-695) b7c -1 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 01/15/2004 
date of birth[—ids Social 


Securit: Number NZ Drivers License mumber 1, _¢ 
residing at pre -6 
telephone was interviewed at his residence. After 


being advised of the identity of the interviewing agent and the 
purpose of the interview,[] provided the following information: 


advised that he lived in prior to 
moving to confirmed that he 
nly knew ADRIAN LAMO online and first met him in a chat room in 1999. 


0} 

could not recall the chat room's title or theme, but said it 
was computer related, and added it was probably over AOL Instant 
Messaging (AIM). advised that he last spoke with LAMO on the 
telephone about! i n_unsolicited AIM message 
from him as recently as th advised that he 
did not respond to LAMO's chat message. knew LAMO used the 
account a@rian@adrian.org and had received emails from LAMO which 
contained news articles about computer security and articles that 
mentioned LAMO. 


uit was taking courses at night tone -5,6 
obtain advised phafie—ad_anre -5,6 


i xy networking, and had even built a 
He added that he has received no formal training 
advised _that_ he spent _a_lot_of time on the 


bb -6 
bI7C -6 


On computers. 


internet at night, usually in used the 
identity whil used Comcast Cable as his 
Internet Service provider (ISP), which was registered under his 

nad used as 
his primary email address since 2000, and _ as a 


backup email. 


(oO Jhad read several news articles that described how 
LAMO hacked into the NY Times and AOL Time Warner. advised bé -5,6 
that LAMO never aske@ him to become a hacker nor used him to exploit P7¢ -5,6 


a company's website or servers.[ ——sédiéi haad_ ead: updates regarding 
LAMO_ in chat rooms from someone using the name knew 
LJ lived inf ian whose name was 


b3 -2 
Investigation on 01/09/04 Tom's River be -1 
b7C -1 
File # Date dictated 01/15/04 bTE -3 
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.. ** FEDERAL BUREAU OF INVESTIGATION 


rs 


€ 0s-01-29 b6 -1 
Precedence: ROUTINE Date: 01/14/2004 bie -1 
wo: New York Attn: sa[_] 
Squad DT-5 
Jacksonville Attn: Pensacola RA 
sa b3 -2 
b6 -1 
From: Newark bye -1 
FTRA-2 bIE -3 


contacts sq [77 


a 
Drafted By: var be} 
Case ID #: : 


Title: ADRIAN LAMO; 
New York Times-Victim; 
Computer Intrusion; 
OO: NY 


Synopsis: Forward results of Jacksonville Lead 1 to New York regarding 
captioned matter. 


b7E -3 


Enclosure(s): Enclosed for New York is one original and copy of FD-302 
for interview of and 1A envelope with original notes. 


Details: On_01/08/04 
check for a 
had_ recently moved to 


the writer conducted _a database b® -3,6 
residing in b7 


was interviewed on 01/09/2004 and 
spent a lot of time on the 


complet and aesht know ADRIAN LAMO. resided with his 


Per other leads set by New York regarding this_case, and 


the forwarded communication received from Pensacola RA, b3 -2 
was interviewed on 01/09/04 with results set forth in thebé -1,6 
enclosed FD-302. Lead covered at Tom's River, NU. b7c -1,6 
bIE -3 


FBI(19-cv-1495)-918 


af 


LEAD (s) : 
Set Lead 1: (Information) 
NEW YORK 
AT NEW YORK, NEW YORK 
Read and Clear. 
Set Lead 2: (Information) 
JACKSONVILLE 
AT PENSACOLA, FLORIDA 
Read and Clear. 
+ 


FBI(19-cv-1495)-919 


FD-302a (Rev. 10-6-95) 


cxtimtinaroaner [| son 1024/2003 ng, 3 


[J stated Lamo mentioned that he could provide 

telephone number. [_ ]also vaguely recalls that Lamo may have 
mentioned something about Yahoo and Microsoft but he could provide 
nothing specific. Lamo also mentioned that he was testing 
someone's security system as well as the government might give him 
a job. . 


| 


| could not provide any information regarding Lamo's residence. 


He believed Lamo was staying with a friend in Fairfax, Virginia at 
the time he 


| 


C7 stated in May 2002, Lamo was with a friend that 
described as being, a large black male approximately 

does not recall_his name but he believed he lived in 
Virginia. After the took Lamo and 


oO a subway station. thought Lamo was returning to 
Virginia. 


| 


stated he only briefly met Lamo's friend in May 2002. 
does not know any of Lamo's friends or acquaintances. 


Do 


[J] eid not know how Lamo accessed the internet. 


b6 -6 
bIC -6 
bIE -1 


be -6 
b7c -6 
BIE -1 


FBI(19-cv-1495)-920 


FD-302 (Rev. 10-6-95) 


ut. 


FEDERAL BUREAU OF INVESTIGATION 


was interviewed telephonically at her place of 
emp ent, telephone number[ sd FeSdes in 
SSS i! 


telephone “imber After being 


advised of the identity of the interviewing agent and the nature of 
the interview,.___]provided the following informationr 


does not reside at 
bea Po] live at 
As stated, | resides in 


Per the scripted interview provided by a 


[--]knows Andrian xr met him personally. 
L_Jeirst spoke with Lamo on Lamo initiated the 
contact with| lat her place of employment via telephone. As 
recorded on caller identification, Lamo was calling from 
telephone number 860-748-4065, although Lamo asked to call her 
at 206-666-4225. L_laescribed Lamo as_being cryptic when he said 
he had something to discuss with _h id n call Lamo and 


Lamo has not’ contacted her since 


knows Lamo from what she has read in the media and 
she knows Lamo "has messed around in [America Online's] system". 
and 
wou ave more specific information 
regarding Lamo's intrusion into AOL. 


could not provide any information regarding where 
Lamo lives, who he visits or stays with. She does not know anyone 
or company to which he was employed. [7__]does not know his 
friends or acquaintances or how he accesses the Internet. 


wef __}o20ijjo2.302 


Investigation on 01/20/2004 _# Baltimore, MD (telephonically) 


ie {sid pee ae 
by oS | 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned te your agency. 


it and its contents are not 10 be distributed outside your agency. FBI(19-cv- 


Date of transcription 01/20 /2 004. 


b6 -6 
b7C -6 


bé -1,6 
b7c -1,6 


b6 -5,6 
bIC -5,6 


b3 -2 
b6 -1 
b7¢ -1 
b7E -3 


1495)-921 


. . . : RID Ineosy: 
FD-302 (Rev. 10-6-95) ALi IW 


EEREIN 
DATE 9. be -1 
7c -1 
FEDERAL BUREAU OF INVESTIGATION 
Date of transcription 10/15/2003 
idence[___] 
telephone b6 -1,6 
After being advised of the id i of the bIe -1,6 
interviewing agent and the nature of the interview, provided 7 -1 
the following information as directed by the scripted Interview 
provided by SA| 
Questions for Individuals 


LC] stated he knows Adrian Lamo. pic 6 


b7E -1 
met Lamo but does not know him personally. 


stated he first_met Adrian Lamo in 


bé -6 
who was bIC -6 
Lamo. The Ziff Davis bIE -1 


Smart Business magazine. stated his interaction with Lamo 


lasted approximately three hours. was on the ®Q 
street, not in an establishment. session is Zee} 


attached. The is posted o: website, 
[-“Jeeseribed Lamo as being "100% geek". He also_stated Lamo b6 -6 
seen ie intelligent, and malicious. During his bic -6 


Lamo discovered a telephone line in an_alley and attempted bIE -1 
to connect his laptop to the telephone line. [oo Jehought Lamo 


was attempting "hack into someone's telephone system." Lamo was in 
an alley and he saw a bare telephone wire and Lamo tried to connect 


the wire to his taptop.[___|aia not believe the wire was 
activated. 


224 f2tuyyjot. sen b3 -2 


be -1 


Investigation on 10/14/2003 Baltimore, Maryland (telephonically) bic -1 
bIE -3 
File # Date dictated nq 
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- bé -6 
bic -6 
bIE -1 


stated he has not spoken to Lamo on the telephone since the 
stated his last contact with Lamo was via 


b6 -6 


stated_he had not spoken with Lamo sinc However, bre -6 
Lamo mailed roximately asking permission to bE -1 
use a took of Lamo. Lamo wanted to use the 


on his (Lamo's) website. Lamo used the of 
adrian@shiraz.ir. stated Lamo provided the cellular 
telephone number of 415-505-4225. 


b7c -6 


[J could not provide any specifics b7E -1 


[J stated: he only spoke with Lamo inf | 


[__|etatea he only met Lamo one time inl 


b6 -6 
bI7C -6 
b7E -1 


FBI(19-cv-1495)-923 


(Rew, 01-31:2003) : “* 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 02/03/2004 
To: New York Attn: 
— Squad DT-5 


From: Baltimore 
Squad 22 


b3 -2 
Approved By: b6 -1 
b7¢ -1 

. BIE -3 


Drafted By: 55 \ 


Case ID #: 
,Title: ADRIAN LAMO; 
NEW YORK TIMES - VICTIM; 
COMPUTER INTRUSION; 
oo: NY . 


Synopsis: Leads set for Baltimore are covered. 


Enclosure (s) ¢ = interview of FD-302 for 
interview of -340 with notes from interview be -6 
and i of LAMO from website, and an FD-340 with notes bIC -6 


from interview. 
Details: CJ was interviewed on 14 October 2003 and 


provided the following’ information per the previously provided b6 -6 
interview questions: BIC -6 


Po 


L_] stated he knows Adrian Lamo. 


b3 -2 
. bé6 -1,6 
met Lamo but does not know him personally. b7C -1,6 


bIE -1,3 


stated he first met Adrian Lamo in 


hired to Lamo. 
Smart Business magazine. 


The 


FEB 9 ~ 2004 


9-cv-1495)-924 


=e * 


To: New York From: Baltimore 
Re: [| 02/03/2004 


lasted approximately three hours. The 
street, not in an establishment. A 


attached. The is posted on 


ee bé -6 
bic -6 

[| described Lamo as being "100% geek". He also stated Lamo BIE -1 

seen quiet, intelligent, and malicious. During his 

or Lamo discovered a telephone line in an_alley and attempted 

to connect his laptop to the telephone line. [eos enongne Lamo 

was attempting "hack into someone's telephone system." Lamo was 

in an alley and he saw a bare telephone wire and Lamo tried to 

connect the wire to his igstce Pa |aia not believe the wire 

was activated. 


b6 -6 
. b7c -6 


bIE -1 


was on the 
from the session is bIC -6 
website, 


stated he has not spoken to Lamo on the telephone since the 
stated his last contact with Lamo was 
via email about 


————————— | 


| stated he had not_spoken with Lamo_since bé6 -6 
However, Lamo mailed approximately| sking bIC -6 
permission to use a took of Lamo. Lamo wanted b7E -1 
to use th on his (Lamo's) website. Lamo used the of 


adrian@shiraz.ir. stated Lamo provided the cellular 
telephone number of 415-505-4225. 


Po 


could not provide any specifics 


() Bre <6 


BIC -6 


BIE -1 
stated he only spoke with Lamo inl 


[__|statea he only met Lamo one time oe 


2 


FBI(19-cv-1495)-925 


To: New York From: Baltimore 


Re: [7 02/03/2004 b3 -2 
b7E -1,3 


\aemecawas Lamo mentioned that he could providel_—ids—s - 


telephone number. Lo Jalso vaguely recalls that Lamo 
may have mentioned something about Yahoo and Microsoft but he 
could provide nothing specific. Lamo also mentioned that he was 
testing someone's security system as well as the government might 
give him a job. 


bé -5,6 
bic -5,6 


LC] could not provide any information regarding Lamo's bb -6 
residence. He believed Lamo was i with a friend in b7c -6 
pS Se] Virginia at the time he Lamo. BIE -1 


| stated in May 2002, Lamo was with a friend thee[ 
described as being, a large black male approximately] 
does not recall his_name but he believed he lived in bb -5,6 
Virginia. After th took Lamo bic -5,6 


and his friend_to.a subway station. thought Lamo was BIE -1 
returning tf Virginia. 


(ee ee 


stated he only briefly met Lamo's friend i 
does not know any of Lamo's friends or acquaintances. 


FBI(19-cv-1495)-926 


To: New York From: Baltimore 
Re: LO) 02/03/2004 


Do 


| did not know how Lamo accessed the internet. 


was interviewed on 09 January 2004 and provided 
the following information: 


L__]knows Adrian Lamo, but_has never met_him personally. 
first spoke with Lamo on| Lamo initiated 


the contact with t her place of employment via telephone. 
As recorded on caller identification, Lamo was_calling from 
telephone number 860-748-4065, although Lamo asked ito call 


her at 206-666+-4225.. _]described Lamo as_being cryptic when he 
said he had something to discuss with her.[$> Aid not call Lamo 
and Lamo has not contacted her since 16 December 2003. 


b6 -5,6 
b7C -5,6 
regarding Lamo's intrusion into AOL. 
LJ could not provide any information regarding where Lamo 
lives, who he visits or stays with. She does not know anyone or be -6 
does not know his friends bic -6 


company to which he was employed. 
-or acquaintances or how he accesses the Internet. 
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To: e ; Baltimore 
Re: 02/03/2004 


LEAD (s): 
Set Lead 1: (Info) 
NEW YORK 
AT NEW YORK 


Read and clear. 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 02/27/2004 
To: Los Angeles Attn: —— 
New York Attn: Squad DT-5 
sat 


From: San Antonio 
Squad 25/Waco_RA b3 -2 


. Oo 7 
approved ay: [7] bic =1 


bIE -3 
pratted By: [7d 
Title: ADRIAN LAMO; 
New York Times - Victim; 
Computer Intrusion; 
oo: NY = b3 -2 
bé -3 


Lead Covered. b7C -3 


bIE -3 


Details: Lead se i Ranh ube ed Waco RA 
ttempt to locat b6 -1,3,5 
— Investigation at this address by S$ b7c -1,3,5 


Waco RA to be the long-time 


Smee Negative results regarding lead to contact [| 


i is 
indicated 
ad once stayed_at residence for a few 
was unsure of current address. 


elcal between sa[__Jana Sal tog b6 -1,3 
Angeles, may have information relating to that byC -1,3 


would be beneficial to New York. 


No further work exists in the San Antonio, Waco RA, b3 -2 
territory. Therefore, this lead is considered covered. b6 -1 
b7C -1 
DIE -3 
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To: -1d om: San Antonio 
Re: 02/27/2004 . 


LEAD (s): 
Set Lead 1: (Info) 
LOS ANGELES 
AT LOS ANGELES, CA 


Attn: sal S—s@Y Read and Clear. 


Set Lead 2: (Info) 


NEW YORK 


AT NEW YORK, NY 


and clear. 
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Financial braclicbnn bes} Los] NEHIS 


3 @ FBI(19-cv-1495)-966 


06/13/2003 
CAH:cah 


egarding the unauthorized intrusion of ADRIAN bic -1, 
i ‘0 contac! telephone number. 
Yann ed contacte ho referred her tof | 


—e contacted _—i dq ind left message for him. b6 -1,5 
b7c -1,5 
telephonically contact 
telephone number ‘who informed her that they will cooperate with 
the investigation but need to have a release from CINGULAR to release the information. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription _07/04/2003 


email: b6 -2 
elephone elephonically pIC -2 
conta a. @Wing agent. After being advised as to the 


| identity of _the interviewing agent and the purpose of the 
interview,|__—iprovided the following information: 


aE rare with an individual by the name of bé -2 
ADRIAN LAMO. met LAMO at a computer forum in New York b7c -2 
City. During this meeting, LAMO cola that he had hacked ° 
into SBC Communications network by exploiting a misconfiguration in 

their. servers. LAMO further stated that he accessed information on 


the SBC Communications network that was confidential in nature. j@ 


ADMINISTRATIVE 


At this point in the conversation, LJ statea that he 
had a work matter that required his attention and asked if we could 
continue the interview on another day. . D6 -2 

on duly 31, 2003,. _—idistated «that LAMO_had sent him b7C -2 
various emails after meeting him. LAMO admitted to[  |that he 
had exploited SBC Communications network with the goal of accessing 
data that was private and confidential. LAMO said it was his job 
to access this type of information. LAMO further stated that he 
does not adhere to the spirit of cooperation and restrictions of a 
non-disclosure agreement. LAMO further explained that 

with him in 


the article regarding LAMO's hacking activities. 


t 
i 


none 


ae New York, NY (teléphonicaily) 


O74 0272003-" 


co 
Investigation oF 
a 


Date dictated; 07/04/2033 * 


This document contains neither recommendations nor conclusions of the PBI. It is the property of the FBI and is loaned to your agency; 
it and its contents are not to be distributed outside your agency. FBI(19-cv-1495)-986 
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(Rev. 01-31-2003) b6 -1 
FEDERAL BUREAU OF INVESTIGATION bic ~1 
Precedence: ROUTINE Date: 04/12/2004 
To: Washington Field Attn: Computer Intrusions Squad 
‘ San Antonio Attn: Computer Intrusions Squad 
Cyber 
b3 -2 
From: New York b6 -1 
Squad DT-5 p7c -1 


Contacts SAT DIE -3 
Approved By: 7 
Drafted By: [sf 


Title: ADRIAN LAMO; 
New York Times-Victim; 
Computer Intrusion; 
OO: NY 


Synopsis: New York to provide completed investigations of 
unauthorized computer intrusions by subject ADRIAN LAMO due to lack of 
jurisdiction. 


Enclosure (s): Packet for Washington Field Office containing 
completed investigation and evidence for unauthorized computer 
intrusion of WorldCom Communications. 


Packet for San Antonio Field Office containing 
completed investigation and evidence for unauthorized computer 
intrusion of SBC Communications. 


Copy of Information to which LAMO pled guilty to the 
intrusion of The New York Times, 


Details: ADRIAN LAMO is a twenty two (22) year old male who commits 
unauthorized computer intrusions into major corporations. LAMO is 
labeled in the media as the "homeless hacker". He considers himself a 
"white hat hacker". Investigation by the New York Office has revealed 
that LAMO is a “black hat hacker", an individual who breaks into a 
computer system with the purpose of inflicting damage or stealing 
data. Each time LAMO hacks a major corporation he alerts friends in 
the media first and has them contact the victim for comment. 


In September 2001, LAMO hacked YAHOO! and rewrote the text 
pof “A YAHOOTNeéWs" article. LAMO gained access through.the..portal's 
pweb-based~prodiictiom~tools and modified a news story 


2 


mice 


FBI(19-cv-1495)-988 


@ ) b3 -2 
To: Washington Field From: Mew Ys , b7E -3 
mC 


SKLYAROV, a Russian computer programmer facing federal criminal 
charges. LAMO used a free internet connection at KINKOS to commit the 
hack. YAHOO! was informed of the breach after being contacted by 
of securityfocus.com, who Was contacted by LAMO. b6 -2,5 
was convicted in 1990's by the FBI for committing unauthor, 7. 24.5 
computer intrusions. ~ - 
In October 2001, LAMO contacted the reporter, _____—idsi 
newsbytes.com to inform him that he had gained unauthorized access 
into a MICROSOFT customer service database. LAMO had gained access to 
MICROSOFT's database is September 2001 but choose not to disclose his 
access until October 2001. AMO utilized a vulnerability in 
MICROSOFT's network that allowed an unpublished Internet Protocol (IP) 
address to be entered into a web browser. The IP address provided 
access to records of people who had bought products and services from 
MICROSOFT. contacted MICROSOFT to ask them for a comment for 
the story Hé was writing about the hack. This was the first instance, 
i i OSOFT confirmed the hack and 
described the incident as 
"an error that led to a breach of privacy, against our privacy 
policy". 


In December 2001, LAMO contacted the reporter, C7 
| securityfocus.com, to inform him that he had gained 
unauthorized access into MCI WORLDCOM's internal network. LAMO gained 
access to WORLDCOM's internal network in October 2001 but choose not 
to disclose his access until December 2001. LAMO provided internal 
screen captures to WORLDCOM to prove he was the hacker. The screen 
captures from WORLDCOM's internal network state, "Not to be reproduced 
in any manner or disclosed to unauthorized individuals". LAMO gained 
access to WORLDCOM's internal network using a free internet connection 
at KINKOS. LAMO exploited a vulnerability in a WORLDCOM proxy server 
to gain unauthorized access to their network. After committing the 


hack and reporting it to LAMO commented "The downside is, I'm 
running out of major US Corporations". Also, one of LAMO's prized 66° <5 
possessions is a screen capture of WORLDCOM's stock price falling e 
after he announced he had hacked the company. b7c -5 


In February 2002, LAMO contacted the reporter, 
newsbytes.com to inform him that he had gained unauthorized access 
into SBC COMMUNICATIONS. LAMO gained access to SBC COMMUNICATIONS 
network in December 2001 but choose not to disclose his access until 
February 2002. LAMO utilized an exploit to gain access to SBC's 
internal network. LAMO used a free internet connection at KINKO's to 
perform the hack. LAMO gained access to usernames, passwords, 
telephone numbers, addresses and other sensitive customer information. 


. In February 2002, LAMO discovered several misconfigured 
proxy servers acting as doorways between the public Internet and the 


\ 


FBI(19-cv-1495)-98 


To: Washington Field From: Néw york b3 -2 
ges seas Bf oa /iaanol Po 


NEW YORK TIME: ivate intranet. LAMO contacted 

to inform him that he had gained unauthorized access 
into The NEW YORK TIMES intranet. LAMO utilized the proxy servers to 
gain access to the NEW YORK TIMES network. Once on the network, LAMO 
cracked a password for a userid with supervisor rights. Utilizing 
this userid he was able to broaden his access as well as perform 
certain functions within the network. LAMO created four (4) 
Lexis/Nexus accounts off of the NEW YORK TIMES intranet and utilized 
these accounts for himself and/or friends to run over 3,000 searches 
of individuals, address and/or court documents. 


LAMO has committed other computer intrusions into several 
other corporations such as AOL and EXCITE@HOME. Each time LAMO 
commits a computer intrusion on a high profile organization he reports 
the vunerability and intrusion to the media causing a distrust of the 
company's clients. The above mentioned corporations have lost 
significant money and trust of their clients. 


In the enclosed San Francisco Weekly article, dated April 
16, 2003, LAMO states "he is preparing to announce, in a few days, 
weeks or months -- whenever he decides the time is right -- his 
biggest hack yet. On the record, he defines his target as a 
"cxitical-infrastructure-related company"; off the record, he exhibits 


ample evidence of his repeated incursions into the corporations 
4 niexnal svete. 2 bS -3 


On 01/08/2004, LAMO pled guilty in the SDNY to an 
information for the hack of The New York Times. The plea agreement 
offered was not a global plea, it only addressed the unauthorized 
computer intrusion of The New York Times. The SDNY, victims and the 
NYO support and will cooperate in the prosecution of LAMO for the 
unauthorized computer intrusion of Worldcom and SBC Communications. 
LAMO is aware that further charges for his actions are pending and 
stated that he is willing to accept responsibility for his actions. 


LAMO is currently released on bond and is awaiting 
sentencing in June 2004. LAMO's sentencing quidelines fall within 6- 
12 months. LAMO is currently residing withD bo -5 

While out on bond, LAMO has top7c -5 

the media and other individuals that he is continuing his hacking 
activities including hacking the FBI's telephone system. LAMO is 
currently being monitored by pre-trial services but as LAMO has stated 
he is able to bypass any monitoring mechanisms they have put in place. 


Due to the N¥YO's lack of venue on the unauthorized 


intrusions of WORLDCOM and SBC COMMUNICATIONS, the NYO is providing 
the appropriate field offices with the completed investigations 


FBI(19-cv-1495)-990 


To: i ield From: New york * e 
Re: 04/12/2008 b3 -2 


regarding these matters. The completed investigations include the 
following: 


1. 302's from the victims 

2. Financial loss breakdown from the victims 

3. TechTV interview with LAMO where LAMO admits to the 
computer intrusions of WORLDCOM and SBC Communciations 

4. Evidence of intrusion provided by the victims (logs and 
screen captures of internal network taken by LAMO for 
WORLDCOM hack) 


NYO, SDNY and the victims request the prosecution of LAMO 


for the unauthorized computer intrusions of WORLDCOM and SBC 
COMMUNICATIONS, in the appropriate venue. 
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To: Washington Field From: ‘New York 
Re: [| 04/12/2008 b3.-2 


bIE -3 


Set Lead 1: (Action) 
WASHINGTON FIELD 


AT ASHBURN, VIRGINIA 


Conduct action deemed appropriate by receiving office. 


Set Lead 2: (Action) 
SAN ANTONTO 


AT SAN ANTONTO, TEXAS 


Conduct action deemed appropriate by receiving office. 
Set Lead 3: (Info) 
CYBER 
AT WASHINGTON, DC 


Read and clear. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transeription _40/23/2003 


ecurity Account Tan 8 = date of birth 
after being advised of the identity of the interviewing agent and 
the nature of the interview provided the following information: 


currently possess a be -5 
ili as her_screen b7C -5 


as_her email address. 
does however 


ho ADRAIN LAMO 
panos] 


ed TAMOT 


and not a 


advised that although she knows 

is, she has never talked to, met and/or interview 

stated that LAMO has been referenced on 
stated that she makes a point 

of not associating with individuals who utilize computers to commits ¢ uc 


Po Cftvised that the] and her 


Although[_____]states that she has never talked to LAMO, _ 
she opined that LAMO lives on the streets because he is mentally bo -5 
ill. Py aavised that because of the fact that she does not b7C -5 
have first hand knowledge of LAMO's activities, she was not in a 
position to answer the detailed questions presented to her relative 
to LAMO's personality, motives, associates, abilities. 


Investigation on 10/16/2003 at Albuquerque, New Mexico 


>» 


This document contains neither recommendations nor conclusions of the BBL It is the property of the FBI and is loaned; to, yout 
it and its contents are not to be distributed outside your agency. 
FBI(19- cv v-1495)- 994 


10/23/2063 


‘ @ e 
wy FD-302e (Rev. 10-6.95) 


b3 -2 
b6é -5 


b7E -3 


Continuation ofFD30zor = [Cw On 10/16/2003 Page 2 


stated that if she was provided with a list of "nics" and/or 

handles as opposed to true names she could possibly provide 

additional data relative to LAMO's associates... _lwas familiar 
with a few of the individual names provided as a result of news 
coverage that_they received following their arrests and/or 
convictions. po ves of the opinion that anyone who interviews 
and protects the identity of an individual prior to a hacking 

incident is just as responsible for the incident as the 

perpetrator. bo -5 


b7c -5 
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FACSIMILE COVER SHEET 


U.S. ATTORNEY'S OFFICE, SDNY 
ONE ST. ANDREW'S PLAZA 
NEW YORK, NY 10007 
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bic -4 
oftcePhoneNeeL 
Fexnunber| 
No. pages (including cover sheet} a : 
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“SOR OFFICIAL USE ONLY” U.S. ATTORNEY FACSIMILE COMMUNICATION 
The information contained in this facsimile message, and any and all accompanying 
documents, constitute “FOR OFFICIAL USE ONLY” infonnation. This information is the . 
property of the U.8. Attomey’s Office. If you are not the intended recipient of this 
information, any disclosure, copying, distribution, or the taking of any action in reliance on 
this information is stricely prohibited, If you received this mformation in error, please notify 
us immediately by telephone at the above namber and destroy the information. 
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“b6 -1 
To: pyc -1 
Tel: Fax: Qia- b5 4 - ZOlF 
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FER-GS-2084 11:29 US ATTORNEY 
SHALL: RESIDE WAARENTS AT THEIR RESIDENGEIN CA: MUST NUL th ABSENE (HUGE brant putin «yt tages ote 
PRETRIAL SERVICES: ENROLL IN ‘eaTonn gern PROGILAM OR SEEK AND MAINTAIN EMPLOYNY APPROVED BY PRETRIAL SERVICES; SHALL 
NOT HAVE ACCESS TOOR USE A COMPUTER FOR E-MAILS, SECRINGIOBTAINING EMPLOYMENT OR SQL ENROLLMENT. COMPUTER USE MAY BE 
MONITORED AT THE DISCRETION OF PRETRIAL. DEFT, RELEASED UPON HIS SIGNATURE W/EQUITY IX HOME TO BE POSTED 9/15/02. DEFT. TO BE PROVIDED W/ 
TRAVEL VOUCHER FOR RETURN TRIP TO SACRAMENTO. CA, (EDCA) 


| United States District Gowet pects 


b7C -1,4 
SOUTHERN DISTRICT OF NEW YORK 
UNITED STATES OF AMERICA APPEARANCE BOND 
v. CASE NUMBER. 
ADRIAN LAMG 63 M 1540 


Eefenduat 


Non-serety: L the undersigned defendant acknowledge that I and my... 
Surety: We, the undersigaed, jointly and severally acknowledge that we and our... 
personal representatives, jomtly shd severally, are bound to pay to the United Stares of America the sum of 


$ 250,000 , and there has been deposited in the Registry of the Court the sum of 
EQUITY IN PARENTS HOME - 3506 LYNNMAS WAY, 
$ 100,060 : incashor CARMICHAEL, CA 
SSS ee ee, eee Deseribe outer senwity 
The conditions of this bond are that the defendant ; ADRIAN LAMO 
Bare 


is to appear before this court and at such other places as the defendant may be required to appear, in accordance with any and all 
ordets and discetions relating to the defendant's appearance in this case, inchiding appearance for violation of a condition of 
defendant’s release as may be ordered or notified by this court or any other United States district court to which the defendant may 
he held to answer or the cause transferred. The defendant is to abide by any judgment entered in such 2 manner by surrendering t 
serve any sentence imposed and obeying any order or direstion in connection with such judgement. 

Tt is agreed and understood that this is a continuing bond (iuchiding any proceeding on appeal or review) which shall 
continue until such time as the undersigned are exoncrated. 

If the defendant appears as ordered or notified and othexwise obeys and performs the foregoing conditions of this bond, 
then this bond is co be void, but if the defendant fails to obey or perform any of these conditions, payment of the amouut of this 
bond shail be dite forthwith. Forfeiture of this bond for any breach of its conditions may be declared by any United States district 
caurt having cognizence of the abave entitled matter at the time of such breach and if the bond if forfeited and if the forfeiture is not 
set aside or remited, judgment may de entered upon motion in such United States district court against each debtor jointly and 
severally for the amount above stated, together with interest and costs, and execution may be issued and payment secured as 
provided by the Federal Rules of Criminal Procedure and any other laws of the United States. 


This bond is signed on. September 12, 2003 at U.S. Courthouse, 500 Pearl, Street, New York, N.Y. 10007 
~ Dae 
Defendant Ca a . Gor Address, 
ADRIAN LAMO 3soe L£ ay, 
Surety Address 
Carrey oliae ( “CA 
Surety Addeess 


£56 OF 


i] Tudiciel Officer Check 
Approved: . 
Judiciel Onset 


i 
Signed and acknowledged before me on September 12, 2003 


Dae 


JOSEPH DEMARCO cn Haha YEE SN 
TOTAL P.G2 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 04/16/2004 


To: New York atta: sat] 


From: Los Angeles 
SARA 3 
Contact: 5S. 


ee b3 -2 
Drafted ay: [etm < BIC +1 


b7E -3 


Title: ADRIAN LAMO; 
New York Times-Victim; 
Computer Intrusion; 
CcO:NY 


Synopsis: Update status of lead 15'and 16. 


Details: Numerous attempts were made to locate and_interview 
but met with negative results. Therefore, was b3 -2 


a” ea on. i rview time set. Prior to the b6 -5 
: interview telephoni cted b7c -5 
the interviewing agent and advise e€ pele lee 


Additionally, a letter was received from advisin b7E -3 
is asserting his constitutional Right to Privacy and doés no 


wish to s the interviewing, the advice of 
ese can be reached at and fax— id 


Attempts were also made to interviewL ——S—w™ bo -5 
at his home but met with negative results. Contact with the b7C -5: 
California Employment Development Department, telephone number 


one number 
writer 


b3 -2 

: b6 -1 

Attempts to contact the New York case agent for further b7C -1 
investigation to be conducted have met with negative results. bIE -3 


Therefore, no further investigation will be conducted by Santa 
Ana unless advise to do so by New York. 


xe 
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To: New York From: Los Angeles 
Re: [04/16/2004 b3 -2 
: bIE -3 


LEAD (s): 
Set Lead 1: 
NEW YORK 


AT NEW YORK 
No further investigation will be conducted by Santa Ana 


unless advise to do so by New York. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 11/18/2003 


was advised of b6 -5 
the identity_of the interviewing agent. was also advised that ,7c¢ _5 
it is known has recently provided information to_the Federal 

Bureau of Investigation (FBI) on other matters, and that] is 

familiar with certain agents in the San Diego FBI Office. 

provided the following information: 


To his knowledge, he has never had contact with the hacker 
named Adrian Lamo. His only knowledge about Lamo is through 
information he has read on the Internet. 


He has no knowledge of Lamo or some other person illegally 
obtaining Lexus/Nexus information concerning him. 


He does not recognize any of the following names: 


L___|eouta provide no further information on this matter. 


+ GRRE 


b3 -2 
Investigation on 11/18/2003 + San Dieqo, California (telephonically) b6 -1 


w sa —_]eon 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 06/03/2004 


From: San Diego 
Squad 19 


Contact: [7 


b3 -2 
Approved By: [7 bé 1 


b7C -1 
Drafted By: [Oh bIE -3 


Title: ADRIAN LAMO 
New York Times - Victim; 
Computer Intrusion; 
OO: NY . : 


Synopsis: To report that San Diego considers all San Diego 
leads covered in this matter. 


Enclosures: 


One original and one copy of an FD-302 of an 628 
interview of |] bé6 -5 
One FD-340 (1+A) with the notes from thel_—sd 


interview. 


Details: On 7-2-2003, New York sent an ec to over 30 offices 
with over 150 leads to conduct interviews of people "with whom 
LAMO and/or others performed unauthorized Lexis/Nexis checks 
obtaining personnel information over a year ago and/or 
individuals LAMO contacted telephonically." In the 7-2-2003 
ec, it states that these 150+ leads are not of people with 
whom LAMO has a close relationship. 


At the time of New York's 7-2-2003 ec, LAMO was a 
high-profile fugitive, well-known in the hacker community. 


In September 2003, LAMO self-surrendered to the U.S. 
Marshalls in Sacramento, California. In early 2004, LAMO 
plead” guilty to a single count of computer fraud, and he is 
scheduled for sentencing later in June of this year. 


FBI(19-cv-1495)-1004 


es: = dis 


To: New d San Diego ® 
Re: 06/03/2004 b3 -2 


Because of the status of this case, it no longer 
appears necessary for San Diego to perform additional 
interviews for this investigation. 


Accordingly, San Diego considers its leads in this 
matter covered. : 
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UNITED STATES DISTRICT COURT 


SOUTHERN District of NEW YORK 
UNITED STATES OF AMERICA JUDGMENT IN A CRIMINAL CASE 
: mee 


Case Number: 04CR 0011 
USM Number: 14702-097 
Sean Hecker, Esq. 
Defendant’s Attomey 

THE DEFENDANT: 

X pleaded guilty to count(s) 1 


pleaded nolo contendere to count(s) 
which was accepted by the court. 


was found guilty on couni(s) 
after a plea of not guilty. 


The defendant is adjudicated guilty of these offenses: 


Title & Section Nature of Offense Offense Ended Count 
18 U.S.C. 1030(a)(5)(A)G) & Computer Fraud ‘April 2002 1 
DBO 

The defendant is sentenced as provided in pages 2 through 2 of this judgment. The sentence is imposed pursuant 


the Sentencing Reform Act of 1984, 


The defendant has been found not guilty on count(s) 


Count(s) is are dismissed on the motion of the United States. 


. _,.._Itis ordered that the defendant must notify the United States attorney for this district within 30 days of any change of name, residence, 
or mailing address until all fines, restitution, costs, and special assessments imposed by this judgment are fully paid. If ordered to pay restitution, 
the defendant must notify the court and United States attorney of material changes in economic circumstances. 


July 15, 2004 


, Hon. Naomi Reice Buchwald, U.S.D.J. oF 
/ ‘Name and Title of Judge 


/ August 2004 
Date 
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Sheet 4—Probation 


DEFENDANT;  ADRIANLAMO 
CASENUMEER: 04 CR 0011 


Judgment—Page __2 of 5S 


PROBATION 


. The defendant is hereby sentenced to probation for a term of : 30 months, the first 6 months of which are to be served on 


home confinement in the defendant’s parents’ home, with the provision that defendant may leave home to attend college courses, 
employment, approved extracurricular activities, and to take his brother for walks around the xieighborhood. 


The defendant shall not commit another federal, state or local crime. 


The defendant shall not unlawfully possess a controlled substance. The defendant shall refrain from any unlawful use of a controlled 
substance. The defendant shall submit to one drug test within 15 days of placement on probation and at least two periodic drug tests 
thereafter, as determined by the court. 


The above drug testing condition is suspended, based on the court’s determination that the defendant poses a low risk of 
future substance abuse. (Check, if applicable.) 


X The defendant shall not possess a firearm, ammunition, destructive device, or any other dangerous weapon. (Check, if applicable.) 


‘The defendant shall cooperate in the collection of DNA as directed by the probation officer. (Check, if applicable.) 


The defendant shall register with the state sex offender registration agency in the state where the defendant resides, works, or is a 
student, as directed by the probation officer. (Check, if applicable.) 


The defendant shall participate in an approved program for domestic violence. (Check, if applicable.) 


Tf this. judgment imposes a fine or restitution, it is a condition of probation that the defendant pay in accordance with the Schedule of 
Payments sheet of this judgment. . 


The defendant must comply with the standard conditions that have been adopted by this court as well as with anyadditional conditions 
on the attached page. 


STANDARD CONDITIONS OF SUPERVISION 
1) _ the defendant shall not leave the judicial district without the permission of the court or probation officer; 


2) the fefendant shall report to the probation officer and shall submit a truthful and complete writtenreport within the first five days of 
each month; 


3) the defendant shall answer truthfully all inquiries by the probation officer and follow the instructions of the probation officer; 
4) the defendant shall support his or her dependents and meet other family responsibilities; 


5) the defendant shall work regularly at a lawful occupation, unless excused by the probation officer for schooling, training, or other 
acceptable reasons; 


6) _ the defendant shall notify the probation officer at least ten days prior fo any change in residence or employment; 


7) the defendant shall refrain from excessive use of alcohol and shall not purchase, possess, use, distribute, or administer any controlled 
substance or any paraphernalia related to any controlled substances, except as prescribed by a physician; 


8) the defendant shall not frequent places where controlled substances are illegally sold, used, distributed, or administered; 


9) the defendant shall not associate with any persons engaged in criminal activity and shall not associate with any person convicted ofa 
felony, unless granted permission to do so by the probation officer; 


10) _ the defendant shall permit a probation officer to visit him or her at any time at home or elsewhere and shall permit confiscation of any 
contraband observed in plain view of the probation officer; 


11) the defendant shall notify the probation officer within seventy-two hours of being arrested or questioned by a law enforcement officer; 


12) the defendant shall not enter into any agreement to act as an informer or a special agent of a law enforcement agency without the 
permission of the court; and 


13) _ as directed by the probation officer, the defendant shall notify third parties of risks that may be occasioned by the defendant’s criminal 
record or personal history or characteristics and shall perrait the probation officer to make such notifications and to confirm the 
defendant’s compliance with such notification requirement. 
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Sheet 4C — Probation 


Sudgment—Page __3 oof 5 


DEFENDANT: ADRIAN LAMO 
CASENUMBER: 04CR 0011 


SPECIAL CONDITIONS OF SUPERVISION 


1. The defendant shall provide the probation officer with access to any requested financial information. 6 

2, The defendant shall not incur new credit charges or opéii additional lines of credit without the approval of the probation 
officer unless the defendant is in compliance with the installment payment schedule. : ek : 

3. At the discretion of probation, any computers used by the defendant will be installed with monitoring and filtering 
equipment. 

4, The defendant is to be supervised by the district of his residence. 
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. . Judgment—Page 4 of 5 
DEFENDANT: ADRIAN LAMO 
CASE NUMBER: 04 CR OO11 


CRIMINAL MONETARY PENALTIES 


‘The defendant must pay the total criminal monetary penalties under the schedule of payments on Sheet 6, 


¥ Assessment Fine Restitution 
TOTALS $ 100 $0 $ 64,938 


1 The determination of restitution is deferred until - An Amended Judgment in a Criminal Case (AQ 245C) will be entered 
after such determination. 


X The defendant must make restitution (including community restitution) to the following payees in the amount listed below. 


Ifthe defendant makes a partial payment, each payee shall receive an approximately pro ortioned payment, unless specified otherwise in 
the priority order or percentage payment column below. However, pursuant to 18 U.S.C. § 3664(2), all nonfederal victims must be paid 
before the United States is paid. 


Name of Payee Total Loss* Restitution Ordered Priority or Percentage 
Clerk of Court $64,938.00 
TOTALS $ $0.00 $ $64,938.00 


X Restitution amount ordered pursuant to plea agreement $ 64,938.00 


‘The defendant must pay interest on restitution and a fine of more than $2,500, unless the restitution or fine is paid in full before the 
Gifteenth day after the date of the judgment, pursuant to 18 U.S.C. § 3612(f). All of the payment options on Sheet 6 may be subject 
to penalties for delinquency and default, pursuant to 18 U.S.C. § 3612(g). 


x The court determined that the defendant does not have the ability to pay interest and it is ordered that: 


the interest requirement is waived for the fine x restitution. 


the interest requirement for the fine restitution is modified as follows: 


* Findings for the total amountof losses are required under Chapters 109A, £10, 110A, and 113A of Title 18 for offenses committed on or after 
September 13, 1994, but before April 23, 1996, 
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7 : Judgment—Page __5 of 5 
DEFENDAN: iT: ADRIAN LAMO 
CASE NUMBER: 04CR 0011 


SCHEDULE OF PAYMENTS 


Having assessed the defendant’s ability to pay, payment of the total criminal monetary penalties are due as follows: 


A x  Lumpsumpaymentof$ _100(sp.assmnt) due immediately, balance due 


not later than og 
x in accordance G D, E,or x F below; or 
L} Payment to begin immediately (may be combined with CG, D, or F below); or 
[] Payment in equal {e.g., weekly, monthly, quarterly) installments of $ over a period of 
{e.g., months or years), to commence {e.g., 30 or 60 days) after the date of this judgment; or 
D Payment in equal {e.g., weekly, monthly, quarterly) installments of $ over a period of 
(e.g., months or years), to commence {e.g., 30 or 60 days) after release from imprisonment to a 
term of supervision; or 
E Payment during the term of supervised release will commence within (¢.g., 30 or 60 days) after release from 


imprisonment. The court will set the payment plan based on an assessment of the defendant’s ability to pay at that time; or 


: EF x Special instructions regarding the payment of criminal monetary penalties: 


Restitution shall be paid to the Clerk, U.S. District Court, in monthly installments of 10% of gross monthly income over 
defendant’s period of supervision. Disbursement shall be made to the following entities in the following amounts: 
The New York Times -- $36,438; Microsoft -- $10,000; Lexis/Nexis -- $18,500. 


Unless the court has expressly ordered otherwise, if this judgment imposes imprisonment, payment of criminal monetary penalties is due during 
imprisonment. All crimina{ monetary penalties, except those payments made through the Federal Bureau of Prisons’ Inmate Financial 
Responsibility Program, are made to the clerk of the court. 


‘The defendant shall receive credit for all payments previously made toward any criminal monetary penalties imposed. 


Joint and Several 


Defendant and Co-Defendant Names and Case Numbers {including defendant number), Total Amount, Joint and Several Amount, 
and corresponding payee, if appropriate, 


The defendant shall pay the cost of prosecution. 


‘The defendant shall pay the following court cost(s): 


The defendant shall forfeit the defendant's interest in the following property to the United States: 


Payments shail be applied in the following order: (1) assessment, (2) restitution principal, (3) restitution interest, (4) fine principal, 
(S) fine interest, (6) community restitution, (7) penales, and (8) costs, including cost OF Heri and court el aes 


FBI(19-cv-1495)-1011: 


AO 245B — Rev. 12/03) Judgment in a Criminal Case 


Altachment (Page 1) — Statement of Reasons 


DEPENDANT, ADRIAN LAMO 
CASENUMBER: 04 CR 0011 
DISTRICT: SDNY. 
STATEMENT OF REASONS 
sclosuse) 
x 


THE COURT ADOPTS THE PRESENTENCE REPORT AND GUIDELINE APPLICATIONS WITHOUT CHANGE. 


OR 


THE COURT ADOPTS THE PRESENTENCE REPORT AND GUIDELINE APPLICATIONS BUT WITH THESE 
CHANGES: (Use Page 3, if necessary.) 


Chapter Two of the U.S.S.G. Manual determinations by court (including changes to base offense level or specific offense 
characteristics): 


© Chapter Three of the U.S.S.G. Manual adjustment determinations by court (including changes to victim-related adjustments, 
role in the offense, obstruction of justice, multiple counts, or acceptance of responsibility): 


D Chapter Four of the U.S.S.G. Manual determinations by court (including changes to criminal history category or scores, 
career offender, or criminal livelihood determinations): . 


THE COURT ADOPTS THE PRESENTENCE REPORT WITH THESE COMMENTS OR FINDINGS {including comments 
or factual findings conceming certain information in the presentence report that the Federal Bureau of Prisons may rely on when it 
makes inmate classification, designation, or programming decisions. Specify court comments or findings, including paragraphs in 
the presentence report.) (Use Page 3, if necessary.) 


GUIDELINE RANGE DETERMINED BY THE COURT (BEFORE DEPARTURES): 


Total Offense Level: 10 

Criminal History Category: i 

Imprisonment Range: 6 to 12 months 

Supervised Release Range: 2 to 3 years 
Fine Range: $ _ 250,000 to _250,000 


Fine waived or below the guideline range because of inability to pay. 


THE SENTENCE IS WITHIN THE GUIDELINE RANGE, THAT RANGE DOES NOT EXCEED 24 MONTHS, AND THE 
COURT FINDS NO REASON TO DEPART. 


OR 


THE SENTENCE IS WITHIN A GUIDELINE RANGE, THAT RANGE EXCEEDS 24 MONTHS, AND THE SPECIRIC 
SENTENCE 1S EMPOSED FOR THESE REASONS: (Use Page 3, if necessary.) 
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DEFENDANT:, ADRIAN LAMO 
CASENUMBER: 04CROO11 
DISTRICT: S.DNY. 


RESTITUTION DETERMINATIONS / . 


Total Amount of Restitution: $ 64,938 
For offenses for which restitution is otherwise mandatory under 18 U.S.C. § 3663A, restitution is not ordered because the number of identifiable 
victims is so large as to make restitution impracticable under 18 U.S.C. § 3663A(c)(3)(A). 


For offenses for which restitution is otherwise mandatory under 18 U.S.C. § 3663A, restitution is not ordered because determining complex issues 
of fact and relating them to the cause or amount of the victims’ losses would complicate or prolong the sentencing process to a degree that the need 
to provide restitution to any victim would be outweighed by the burden on the sentencing process under 18 U.S.C. § 3663A(c)(3)(B). 


For other offenses for which restitution is authorized under 18 U.S.C. § 3663 and/or required by the sentencing guidelines, restitution is not 
ordered because the complication and protongation of the sentencing process resulting from the fashioning of a restitution order outweigh the need 
to provide restitution to any victims under 18 U.S.C. § 3663(a)(1)(B)Ci). 


Restitution is not ordered for other reasons: 


Partial restitution is ordered under 18 U.S.C. § 3663(c) for these reasons: 
DEPARTURE (Check all that apply) 


The sentence departs below the guideline range for the following reasons; or 
The sentence departs above the guideline range for the following reasons: 


Pursuant to a Plea Agreement 

based on 5K1.1 motion of the government based on the defendant's substantial assistance; 

based on a government motion pursuant to an early disposition program; 

based on a binding plea agreement for departure which the court has accepted (cite below reason, if applicable); 
based on a plea agreement which cites the below reason for departure, which the court finds to be justified; or 


based on a plea agreement which states that the government will not oppose a defense departure motion and cites the below 
yeason. 


Pursuant to a Motion Not Addressed in a Plea Agreement 

pursuant to a 5K1.1 motion of the government based on the defendant’s substantial assistance; 

pursuant fo a government motion based on the below reason for departure; or 

pursuant to a defense motion based on the below reason for departure to which the government has not objected; or 
pursuant to a defense motion based on the below reason for departure to which the government has objected. 


Other than plea agreement or motion by the parties based on the below reason for departure. 


‘Reason(s) for Departure . 
4A1,3 Criminal History Adequacy (explain) 5K2.8 Extreme Conduct (0) 5K2.16 Voluntary Disclosure of Offense 
5K2.0 Aggravating or Mitigating 5K2.9 Criminal Purpose 5K2.17 High-Capacity Semiautomatic Firearm 
Circumstances (explain): 5K2.10 Victim’s Conduct 5K2.18 Violent Street Gang ' 
5K2.1 Death 5K2.11 Lesser Harm 5K2.20 Aberrant Behavior 
5K2.2 Physical Injury 5K2.12 Coercion and Duress 5K2.21 Dismissed and Uncharged Conduct 
5K2.3 Extreme Psychological Injury 5K2.13 Diminished Capacity [} 5K2.22 Age or Health of Sex Offenders 
5K2.4 Abduction or Unlawful Restraint 5K2.14 Public Welfare [] 5K2.23 Discharged Terms of Imprisonment 
5K2.5 Property Damage or Loss [1] 5K3.1 Barly Disposition, “fast-track” Program. 


5K2.6 Weapons and Dangerous Instruments 
5K2.7 Disruption of Government Function 


[Other (e-g., 2B1.1 commentary, 5H1.1-SHI.6 or SHI.11)(explain and state guideline and/or statutory basis). (Use Page 3, if necessary.) 
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Name; inffCW Info Phone Toil Rec] Pos - ITC 
A. Complaint / Information / Indictment F. Conviction J. Civil Rico Matters Date: 
OFederal J Local D International C)Federal, 1 Local [1] International Also Complete "Section G” 
Complaint Date: Conviction Date: Other Civil Matters Date: 
Check if Civil Rico Complaint Subject Description Cod Judgment —_ _____* 
pacenciba tse: == Judicial Outcome 
Mormation, Bates, For 8F, G, H-Include Agency Code ‘Amount $ 
setae Pate O Felony or OD Misdemeanor Suspension: Years Months 
B. Locate/ Arrest U Plea or = Trial 
(1 Federal [} Local [international State: Judicial District: K. Administrative Sanction Date: 
Subject Priory: DA OB CC Subject Description Code 7 
: ‘ 5 Type: Length: 
posse Oe SnUs: Code Notetion: [ Suspension] Permanent 
Arrest Date: Required for sections A,8,Fand J £1] Debarment o 
1 Subject Resisted Arrest (Federal Only). (Injunction Year. Months 
[1 Subject Arrested was Armed Title Section # Counts 
zi L. Asset Seizure Date: 
©. Summons Date: Asset Forfeiture Date: 
Federal 1 Local CATS # Mandatory 
: — Circle below one of the three asset forfeiture: 
D. Recovery/Restitutiow/PELP X Admin, Civil Judicial, or Criminal 
O Federat_[} Local [International Do not indicate $ value in Section D 
Recovery Date: H. Sentence Date: i JOt - 7 Tas 
Code * v Amount §. Sentara Typer M. Acquittal/Dismissal/Pretrial Diversion 
Code v Amount §. thas! Vers lee (circle one) Date: 
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(Court Ordered [7 Pretrial Diversion Pisbationt: Yous. N. Drug Seizures / Date: 
Code * v Amount §, hae $ Drug Code *. 
PELP Date: ics Weight Code © 
. 5 FDIN 
Gode *__v Amount 8 1. Distuption/Dismantlement: / Do not indicate $ value in Section D 
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ption Date: aaah ar : 
Released by: [) Terrorist [) Other : ©. Child Victim Information 
Number of Hostages: Dismantiement Date: _____ Child located/identified Date: 
Completion of FD-818a Side 2 Mandatory DB living Deceased 
P. Subject Information - Required for all blocks excluding block D (Recovery/PELP), blacks E, l, L, and N. 
Name Race *] Sex | DateoiBith | Social Security No. (available) 


Adnan “Yamo 


WJ 


mr laches! O4)-T- 0804. 


For ladictmentsiConviclion? only: 


C1 Subject related to arf LCN, Asian Organized Crime (AOC), Italian Or 


a 


a ganized Crime (IOC), Russian/Eastern European, Caribbean, or Nigerian Organized Crime Group -' 
Comptete FD-8154, Side 1 Blocks A-E mandatory, F-H as appropriate. * 
Subject related to an OO/Drug Organization, 2 VOMO Program National Gang Strategy target group, or a VOMO Program National Priority Initiative target group ~ 


Complete FD-515a, Side 1 Blocks A-C only. 


X Additional information may be added by attaching another form or a plain sheet of paper for additional entries. 


* See codes on reverse side. 


¥ Requires that an explanation be attached and loaded into ISRAA for recovery over $im and PELP over $5, disruption, dismantlement. and drig seizures. 
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EROPERTY CODES 


1 Cash 

82 Stocks, Bonds or Negot Instruments 
3) General Resi Merchandise 

34 Vehicles 

0S Heavy Mochinery & Equipment 

08 Aherat 


07 dewelty 
te Veseis 

09 Ast, Antiques oF Rase Collcerions 
Mh Real ropesy 

20° Alter 

sentence TYPES 


CP Capital Punishment 

JS fait Sentence 

LE LifeParole 

LS Life Sentence 

NS No Semience (Subject isa Fugitive, 
Ingaac, has Died, or is 3 
Corporation) 

PB Probation 

$I Suspension of Jsil Sentence 

YE Youth Correction Act 


PELP CODES 


22 Counterfeit 
Stucks/Bonds/Currency! 
Negotiable Instruments 

23° CounterfeivPirated Sound 
Recordings or Motion Pictures 

24—_Bank Theft Scheme Aborted 

28 Ransome, Extortion or Bribe 
Demand Aborted 

26 ‘Theft From or Feaud Against 
Government Scheme Aborted 

27 Commercial or Industrial 
‘Theft Scheme Aborted 

30 AltOther 


SUBSECTS 
IF Boss 

1G Undesdoss 

IH Consigticre 
Acting Bost 
1K Capodecina 

iL Soldier 
KNOWN CRIMINALS 


2A Top Ten or LO, Fugitive 
2B Top Thief 
2 Top Con Man 


FOREIGN NATIONALS 


3A Legal Alien 

3B Megat Atien 

3C Foreign Offiefs! Wout 
Diplomatic Immunity 

3D UN. Bmployee ‘Wout 

iplosnatic fmmounity 

3E Foreign Student 

3F AN Others 


TERRORISTS 


4A Knowl Member ofa 
“Fettorist Organization 

8B Possibte Terrorist Member 
‘or Sympathizer 


RACE CODES 
A AsiawPacific slander 
Bo Black 
1 IndiantAmetican 
VU Unknowe 
Ww White 
X —Nonindividuat 
AGENCY CODES 
AFOIS Air Force Office of Special Investigations 
ACIS. Atmy Criminal favestigaive Service 
BATF Bureau of Alcohol, Tobacco & Firearms 
BIA Bureau of indian Aftsies 
BCAA Defense Contract Audit Agency 
DCIS Defense Criminal Investigative Service 
DEA Drug Enforcement Administration 
DOC Department of Corrections 
DOL —_Dept. of interior 
EPA Environmental Protection Agency 
FAA Federal Aviation Administration 
DA Food aad Drug Administration 
HHS Dept. of Hest & Human Services 
HUD Dept, of Housing & Uiban Development 
INS —_Iramnigration and Naturatization Service 
IRS Internal Revenue Service 
NASA Natl Acconavtics & Space Admin 
NBIS Nat NARC Border imerdiction 
NCIS. Naval Criminal investigative Service 
RCMP Royal Canadian Mounted Potice 
SBA Small Business Adminisieat 
USBP US. Border Pairos 
USCG US. Coast Guard 
USCS US. Customs Service 
USDS | US. Department of Site 
USMS "US Marshals Service 
USPS US. Postal Service 
USSS USS. Secret Seevice 
USTR US, Treasory 
LOC Local 
CIty City 
COUN County 
sv State 
OTHR Other 
SUBJECT DESCRIPTION CODES 
UNION MEMBERS 


ALL INFORMATISN CONTA 


EREIM IS 


SD President 
SE Vice-President 

SF Treasurer 

SG Seoretary/Treasuser 

SH Executive Board Member 
Si Business Agent 

54 Representative 

5K Organizer 

SL Business Manager 

5M Financial Sceretary 

SN Recording Secreiary 

SP Office Manager 


$Q. Clerk 
SR Shop Steward 

SS Member 

ST Tesstee 

SU Other 
GOVERNMENT SUBJECTS 


GR, 6G, GH: include Agency Code) 


6A Presidentiat Appointee 
6B U.S, Senaton/Stal 

6C US Representative Sait 

8D Federal JudgelMagisteate 

GE Fedesal Prosecutor 

GE Federat aw Enforcement Officer 
6G Federal Hmmployes -GS 13 & Above. 
GH Federat Employee - GS 12 & Below 
6 Governor 

6K Lt. Govemor 

GL State Legistator 

6M State Judge/Mapistrate 

SN Sate Prosecutor 


INES 


HER Heroin 
HSH Hashish 
KAT Khat 
LsD Usp 
MAR Madjuana 
MOM Methylenedioxymethamphetamine 
MET Methamphetamine 

MOR Morphine 

OPM Opivm 

OTD Other drys 


UNCLASSIFIED i in 
ERIE 93-01-2016 gj BRE/ DHS RYS b6 -l1 
t b7c -1 
JUDGMENT CODES 
© Consent udgient 
CO Court Ordered Setttement 
DF Default Judgment 
DI Dismissal 
JN. Hudgtnen Notwitstanding 
MY Mined verde 
S$) Summary hudgment 
VD Verdict for Defenders 
‘YP Verdict for Plaintiff’ 
JupICIaL ouTcomE 
AG Agreement 
DR Dared Removed 
CC Civil Contempt 
DC Disciplinary Charges 
rf 
Pi inary Injunction 
PR Temporary Restraining Order 
PS Presling Setement 
RN Restitution 
SP Suspension 
YVR Voluntary Resignation 
OT oer 
RUG CODES 
COC Cocaine 


DRUG WEIGHT CODES 


GM 
KG 
L 
ML 
Pp 
by 


Gram(s) 
Kitogear(s) 
Lites) 
Minituerts) 
Plants) 
Dosage Unit(s) 


Continuation of GOVERNMENT SUBJECTS. 


Local Legislator 
Local Judpe/Magist 
Local Prosecutor 


cle 


Locat Law Enforcement Officer 


oP 
State Law Enforcem 
State Al Others 


ent Officer 


Mayor Locat - AN Others 


8X County Commissioner 
8Y City Councitman 

BANK EMPLOYEES 

TA Bank Officer 

7B Bank Employee 
OTHERS 

8A All Other Subjects 

8B Company o¢ Corporation 
CUILD PREDATORS, 

9A Child Care provider 

9B Clesgy 

8C Athletic Coach 

9D TeacherAide 

9E Law Enforcement Pessonnet 
9F Counselor 

9G Relative 

9H Stranger 

Other 


b3 
bo 
bIC 
b7E 


-2 

-1 
-1 
-3 
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09/08/2004 Joba a ddc0000" SENTENCING Sdbbebinnnaa: 


—SENSTTTVE-7 UNCLASSIFIED 


Case Nunber| Stat Agent Namez Report Date: 09/08/2004 b3 -2 
Serial No. Stat Agent SOC.: Accom Date,: 07/15/2004 be -1 
b7c -1 
b7E -3 


Page t + 09/08/04 13:38:07 


Does Accomplishment Involve Assisting Agents SOC Subject Name 


LAMO, ADRIAN 
Afugitive..........28 
Bankruptey Fraud. 6... 2. 

Computer Fraud/Abuse. . 
Corruption of Public Officials: N 
Money Laundering... 2... 2 


RA Squad Task Force 


| 
| 
I 
{ 
I 
I 


Sub. Invest. Asst by Other FOs: 1 = Used, but did not help 
2 = Helped, Minimally 
Investigative Assistance or Technique Used 3 = Helped, Substantially 
4 = Absolutely Essential 
FINAN ANALYST LAB DIV EXAMS: UCO-GROUP I FT. MON-NRCSC 
AIRCRAFT ASST LAB FIELD SUP UCO-GROUP It FOR LANG ASST 
COMPUTER ASST PEN REGISTERS UCO-OTHER NON FBI LAB EX 
CONSEN MCNITR PHOTO COVERGE NCAVC/VI-CAP VICT-WETN COOR 
ELSUR/FISC POLYGRAPH CRIM/NS INTEL 10 WANTED FLYR 
ELSUR/TIT SRCH WAR EXEC CRIS NEG-FED SARS 
ENG FIELD SUP SHOW MONEY CRIS NEG-LOC CART 
ENG TAPE EXAM SOG ASST ERT ASST ASSET FORE PRO 
LEGATS ASST. SWAT TEAM BUTTE-1TC FORF SUPPORT P 
EVIDNCE PURCH TECH AG/EQUIP SAVANNAH: ITC 
INFORMANT/CH TEL TOLL RECS POC-WRCSC 
Type of Sentence . . . PB 
Bate of Sentencing . ..: 07/15/2004 


Federal, Local, or International (F/L/I}: F 


Year Month 
Time in Jail, 
Time Suspended, 
Probation Times: 2 é 
S 64938 


Total Fines. . 


ADRIAN LAMO IS A WHITE MALE WITH A DOB:02/20/1981 AND SSN:042-74-6804 


—SEHGHVE / UNCLASSIFIED 
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Vv RYS be -1 
FEDERAL BUREAU OF INVESTIGATION as 


(12/3 1/1995} 


Precedence: ROUTINE Date: 09/05/2004 
To: New York 


From: New York 
Squad DT-5 


contacts (et. [C*d;( 2 


Title: ADRIAN LAMO; 
New York Times-Victim; 
Computer Intrusion; 
OO: NY 


Synopsis: Submitting late FD-515. 


Details: The FD-515 for the sentencing of ADRIAN LAMO is late 

due to the necessary information to complete the FD-515 was b6 —-4 
recently received from the assigned Assistant United States pyc -4 
Attorney, SDNY, 


++ 


ae 


DSr=2 
be -l1 
bIC-- 1 
bTE -3 


FBI(19-cv-1495)-1018 


@ 


b6 -1 
DFC. 1, 
bIE -3 


FBI(19-cv-1495)-1019 


g@ 


é 


; Rev. ggse20n a R : ones bé -1 
° FEDERAL BUREAU OF INVESTIGATION b7e -1 
Precedence: ROUTINE Date: 09/23/2004 
To: New York Attn: Kowa DI-5 
SA 
Squad 5 
Contact: SA b3. -5 


approved By:[ b6 -1 
b7C -1 
Drafted By: [| pic -3 


Title: ADRIAN LAMO; 
TRAVLER/ENTICEMENT 


Synopsis: To close captioned matter. 


Details: Captioned matter was referred by the New York Field 
Office in December 2003. This matter was not pursued due to 


several other case priorities, Division priorities, and the b3 -5 
transfer of SA | original case Agent in this matter. be -1 


7¢ -1 
The length of time in which this matter was referred, bic 


to present, significantly reduces the chances of data being 
recovered from Lamo's ISP. [__—sdt Division has one Agent 
assighed to Innocent Images Matters and is not able to devote the 
time to investigate this matter. 


In view of the aforementioned and the fact that Lamo 
was in negotiations to plea guilty to his computer intrusion 
crime, it is requested this matter be closed. 


FBI(19-cv-1495)-1021 | 


vo e 
. To: ‘Mew York From: [7] 
Pe: DATES 0972572008 bao 


bIE -3 


LEAD (s): 
Set Lead 1: (Info) 
NEW YORK 
AT _ NEW YORK 


For information. 


+ 


FBI(19-cv-1495)-1022 


ALL INT 

EEREIN Ig -- Working Copy ---- 5 Page 1 

TRIE 08-6 bo -1 
b7c -1 

Precedence: ROUTINE Date: 09/23/2004 

To: New York Attn: at — — 

From: 


Squad 5 


bIC -1 


Title: ADRIAN LAMO; 
TRAVLER/ENTICEMENT 


Synopsis: To close captioned matter. 


Details: Captioned matter was referred by the New York Field 
Office in December 2003. This matter was not pursued due to 


several other ities, Division priorities, and the 3-5 
transfer of af original case Agent in this ene) 
matter. : bo -1 
BY 1 
The length of time in which this matter was 
referred, to present, significantly re chances of 
data being recovered from Lamo’s ISP. Division has 
one Agent assigned to Innocent Images Matters and is not able 
to devote the time to investigate this matter. 
In view of the aforementioned and the fact that Lamo 
was in negotiations to plea guilty to his computer intrusion 
crime, it is requested this matter be closed. 
LEAD (s): 
Set Lead 1: (Info) 
NEW YORK mo Od IZ 
ye 
AT NEW YORK ei 
5 Soa! 4 
For information. y @ HB) 2 
b6é -1 
biG HST 
b7E -3 
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E 


PATE 93 
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WrrHeTeEXT_= 
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FBI(19-cv-1495)-1024 


ALL INFORMAT 


< EEREIN 
(127%21995) CATE @ b6 -1 
eee b7C -1 
FEDERAL BUREAU OF INVESTIGATION 
Precedence: ROUTINE Date: 09/05/2004 


To: Wew York 


From: New York 
Squad DT-S 


be -1 


mpproved py:[ pIC -1 
DIE -3 


Title: ADRIAN LAMO; 
New York Times-Victim; 
Computer Intrusion; 
O00: NY 


Synopsis: Request to close above captioned investigation. 


Details: On 7/15/2004, ADRIAN LAMO was sentenced to 30 months 
probation with 6 months home confinement for the unauthorized 

intrusion into the New York Times. LAMO was also ordered to pay 
$64,938.00 in restitution. Due to the Southern District of New 

York, Assistant United States Attorney,[——~SCS—S b6 -4 
resistance to have venue waived for the unauthorized intrusions b7C -4 
of WorldCom, Yahoo, SBC Communications and t-mobile that LAMO has 
openly admitted to committing, the NYO has forwarded these 

completed investigations to the appropriate field offices for 
prosecution. A global plea was not offered by the SDNY when LAMO 

plead guilty to the New York Times unauthorized intrusion. 


On 7/12/2004, writer received a phone call from a b7D 
source who provided information about LAMO. The source stated 
that 


-1 


aie b3 -2 
whee DIE -3 


FBI(49-cv-1495)-1025 


% 


’ To: New York From: New York 7 b7E -3 
s-rmRer [| $#, 09/05/2004 


bS -1 
be -4 
b7c -4 
b7D -1 


It is for the reasons stated above, writer requests the 
above captioned investigation be closed. 
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DATE 2: 


INVESTIGATIVE CASE MANAGEMENT 


List Lead for Case 


09/07/2004 
a b6 -1 
b7C -1 
b3 -2 
bIE -3 


FBI(19-cv-1495)-1027 


09/07/04 
Case id 


TE 93-01-2 


List Lead for Case 


Serial.Lead Set To 


WASHINGTON FIELD 
SAN ANTONIO 
CYBER 

WASHINGTON FIELD 
LOS ANGELES 

NEW YORK 

NEW YORK 

NEW YORK 
JACKSONVILLE 
NEW YORK 

NEW YORK 


CYBER 
NEW YORK 


NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
SAN ANTONIO 
HOUSTON 
CYBER 
NEW YORK 
NEW YORK 
NEWARK 
CYBER 
NEWARK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 
NEW YORK 


ASHBURN, VIRGINIA 
SAN ANTONIO, TEXAS sna 03/03/04 05/06/04 


WASHINGTON, DC 
ASHBURN, VIRGINIA 
LOS ANGELES, CA 
NEW YORK, NY 


NEW 


YORK 


NEW YORK, NEW YORK 
PENSACOLA, FLORIDA 
NEW YORK, NEW YORK 


NEW 


YORK 


cclu 


NEW 


YoRK 


MADISON 
NEW YORK, NY 


NEW 


NEW YORK CITY, NEW YORK 


NEW 
NEW 
NEW 
NEW 
NEW 
NEW 
NEW 
NEW 
NEW 
NEW 
NEW 
NEW 
NEW 
NEW 
NEW 
NEW 
NEW 


YORK 


YORK, 
YORK, 
YORK, 
YORK, 
YORK 
YORK 
YORK, 
york 
yorK 
yorK 
YORK, 
YORK 
YORK, 
YORK, 
YORK, 
YORK 
YORK, 


NEW YORK 
NY 

NEW YORK 
NEW YORK 


NEW YORK 


NY 
NEW YORK 
NY 
NEW YORK 


NEW YORK 


TEMPLE, TEXAS 
VICTORIA, TEXAS 
CYBER 


NEW YORK CITY, NEW YORK 


NEW 


YORK 


Date Set 


05/03/04 


05/03/64 
05/18/04 
03/03/04 
03/03/04 
02/05/04 
91/25/04 
01/23/04 
01/23/04 
04/07/04 
12/23/03 
12/23/03 
42/11/03 
42/05/03 
12/65/03 
12/04/03 
12/03/03 
49413 /03 
11/07/03 
41/03/03 
11/03/03 
41/03/03 
10/29/03 
10/28/03 
10/23/03 
10/23/03 
10/23/03 
10/23/03 
10/21/03 
10/17/03 
10/17/03 
40/17/03 
10/15/03 
10/10/03 
40/10/03 
10/10/03 
10/10/03 
10/10/03 
40/09/03 


NEW BRUNSWICK, NEW JERSEY 10/08/03 
CYBER 


TOMS RIVER, NEW JERSEY 


NEW YORK, NEW YORK 
NEW YORK, NEW YORK 


NEW YORK CITY, NEW YORK 


NEW YORK, NEW YORK 
NEW YORK CITY 
NEW YORK CITY 


NEW 


YORK 


NEW YORK, NY 
NEW YORK, NEW YORK 


10/08/03 
10/07/03 
10/07/03 
10/06/03 
10/01/03 
09/30/03 
09/23/03 
09/22/03 
09/22/03 
69/18/03 
09/18/03. 


ICHCPRO7 
09:06:24 Page: T 7 
Assigned Status 


05/18/04 


c 

A 
05/05/04 Cc 
05/18/04 Cc 
04/02/04 Cc 
03/05/04 Cc 
03/05/04 Cc 
O1/27/04 Cc 
01/25/04 
O1/27/04 
01/27/04 € 
12/23/03 
12/23/03 C 
12/18/03 C 
12/08/03 C 
12/09/03 Cc 
12/09/03 c 
12/09/03 Cc 
11/14/03 oc 
41/20/03 Cc 
11/08/03 c 
11/05/03 c 
11/05/03 Cc 
11/05/03 ¢ 
11/05/03 t 
10/27/03 t 
10/27/03 ¢ 
10/27/03 t 
10/27/03 t 
10/27/03 ¢ 
10/27/03 C 
10/27/03 C 
10/27/03 C 
10/27/03 Cc 
10/27/03 c 
10/14/03 ¢ 
70/10/03 oC 
40/16/03 ¢ 
10/27/03 ¢ 
10/27/03 c 
10/20/03 c 
10/09/03 ¢ 
10/23/03 ¢ 
10/27/03 Cc 
10/07/03 C 
Cc 

c 

Cc 

c 

c 

c 

c 


FBI(19-cv-1495)-1028 


List Lead for Case ICHCPROZ 
09/07/04 09:06:24 Page: 2 
fase Id Serial.lead Set To At Date Set Assigned Status 


NEW YoRK NEW YoRK 09/16/03 c 
NEW YORK NEW YORK CITY 09/15/03 c 
NEW YORK NEW YORK, NY 09/14/03 c 
NEW YORK NEW YORK, NEW YORK 09/10/03 09/19/03 
NEWARK MOORESTOWN, NEW JERSEY 09/10/03 09/15/03 C 
NEWARK TEANECK, NEW JERSEY 09/10/03 09/16/03 Cc 
NEWARK WASHINGTON, NEW JERSEY 09/10/03 99/12/03 ¢ 
NEWARK SPRINGFIELD, NEW JERSEY 09/10/03 99/12/03 ¢ 
NEWARK RIVERTON, NEW JERSEY 09/10/03 09/12/03 
NEW YORK NEW YORK, NY 09/10/03 c 
SACRAMENTO SACRAMENTO, CA 09/10/03 09/10/03 & 
SAN FRANCISCO SAN FRANCISCO, CA 09/10/03 10/21/03 ¢ 
CYBER CYBER, WA,DC 09/10/03 99/10/03 & 
NEW YORK NEW YORK 09/09/03 c 
SAN FRANCISCO SAN FRANCISCO 09/05/03 10/21/03 c 
NEW YoRK NEW YORK 09/04/03 c 
SAN FRANCISCO SAN FRANCISCO 09/04/03 10/22/03 
NEW YORK NEW YORK, NY 09/04/03 09/05/05 
ATLANTA 08/08/03 c 
BALTIMORE 08/08/03 08/08/03 Cc 
BOSTON 08/08/03 08/11/03 
CHICAGO 08/08/03 c 
CINCINNATI 08/08/03 08/08/03 
CLEVELAND 08/08/03 c 
CYBER 08/08/03 08/11/03 ¢ 
DALLAS 08/08/03 08/12/03 ¢ 
DENVER : 08/08/03 08/13/03 ¢ 
DETROIT 08/08/03 08/12/03 ¢ 
HONOLULU 08/08/03 c 
HOUSTON 08/08/03 08/08/03 Cc 
INDIANAPOLIS 08/08/03 08/15/03 ¢ 
JACKSONVILLE 08/08/03 c 
LAS VEGAS 08/08/03 08/10/03 c 
LITTLE ROCK 08/08/03 c 
LOS ANGELES 08/08/03 08/12/03 C 
MEMPHIS 08/08/03 08/29/03 
MIANT : 08/08/05 08/11/03 Cc 
MILWAUKEE 08/08/05 08/11/03 
MINNEAPOLIS. 08/08/03 08/08/03 c 
NEW HAVEN 08/08/03 08/11/03 c 
NEWARK 08/08/03 08/11/03 c 
OKLAHOMA CITY 08/08/03 08/12/03 ¢ 
OMAHA 08/08/03 08/11/03 & 
PHILADELPHIA 08/08/03 c 
PGRTLAND 08/08/03 c 
SACRAMENTO 08/08/03 08/08/03 
SAH DIEGO 08/08/03 08/29/03 c 
SAN FRANCISCO 08/08/03 10/21/03 c 
SEATTLE : 08/08/03 08/11/03 C 
SPRINGFIELD 08/08/03 08/11/03 
WASHINGTON FIELD 8/08/03 08/14/03 Cc 
ALBANY 08/08/03 08/20/03 


FBI(19-cv-1495)-1029 


List Lead for Case ICMCPROT 
09/07/04 09:06:24 Page: 3 
Case Id Serial.Lead Set To At Date Set Assigned Status 


ALBUGUERGUE 08/08/03 08/08/03 Cc : 3 E 
ANCHORAGE 08/08/03 08/08/03 
ATLANTA 08/08/03 08/11/03 Cc 
BALTIMORE 08/08/03 08/08/03 Cc 
BIRMINGHAM 08/08/03 08/08/03 Cc 
BOSTON 08/08/03 08/11/03 c 
BUFFALO 08/08/03 08/12/03 Cc 
BUTTE ITC 08/08/03 08/11/03 ¢ 
CHARLOTTE 08/08/03 08/08/03 c 
CHICAGO 08/08/03 08/12/03 
CINCINNATI 08/08/03 08/08/03 c 
SLEVELAND 08/08/03 08/11/03 
COLUMBIA 08/08/03 08/11/03 C 
CRIT INCIDENT RESPO 98/08/03 08/08/03 
DALLAS 08/08/03 08/12/03 C 
DENVER 08/08/03 08/13/03 C 
DETROIT 08/08/03 08/12/03 C 
EL PASO 08/08/03 08/14/03 C 
FORT MONMOUTH ITC 08/08/03 08/11/03 ¢ 
HONOLULU 08/08/03 08/11/03 ¢ 
HOUSTON 08/08/03 08/08/03 Ct 
INDIANAPOLIS 08/08/03 08/13/03 Cc 
08/08/03 08/08/03 Cc 
SACKSONVILLE 08/08/03 08/15/03 Cc 
KANSAS CITY 08/08/03 08/08/03 t 
KNOXVILLE 08/08/03 08/14/03 ¢ 
LAS VEGAS 08/08/03 08/10/03 
LITTLE ROCK 08/08/03 08/08/03 Cc 
LOS ANGELES 08/08/03 08/12/03 C 
LOUISVILLE 08/08/03 08/11/03 Cc 
MEMPHIS 08/08/03 08/15/03 C 
MIAMI 08/08/03 08/11/03 c 
MILWAUKEE 08/08/03 08/11/03 
MINNEAPOLIS 08/08/03 08/08/03 Cc 
MOBILE 08/08/03 08/11/03 Cc 
NEW HAVEN 08/08/03 08/11/03 
NEW ORLEANS: 08/08/03 09/02/03 
NEWARK 08/08/03 08/11/03 Cc 
NORFOLK 98/08/03 08/12/03 c 
OKLAHOMA CITY 08/08/03 08/12/05  c 
OMAHA 08/08/03 08/11/03 C 
PHILADELPHIA 98/08/03 08/13/03 
PHOENIX 08/08/03 08/19/03 
PITTSBURGH 08/08/03 08/13/03 ¢ 
POCATELLO ITC 08/08/03 08/11/03 Ct 
PORTLAND 08/08/03 08/12/03 ¢ 
RICHMOND: 08/08/03 08/08/03 Ct 
SACRAMENTO 08/08/03 08/08/03 Cc 
SALT LAKE CITY 08/08/03 08/08/03 ¢ 
SAN ANTONIO 08/08/03 08/12/03 C 
SAN DIEGO 08/08/03 08/15/03 Cc 
SAN FRANCISCO 08/08/03 08/25/03 C 


FBI(19-cv-1495)- 


1030 


09/07/04 
Case Id 


List Lead for Case TOMCPROT 


Serial.Lead Set To 


SAN JUAN 
SAVANNAH ITC 
SEATTLE 
SPRINGFIELD 
ST Louis 
TAMPA 
WASHINGTON FIELD 
SACRAMENTO 
SACRAMENTO 
SACRAMENTO 
SACRAMENTO 
SACRAMENTO 
SACRAMENTO 
SAN FRANCISCO 
SAN FRANCISCO 
SAN FRANCISCO 
SAN FRANCISCO 
SAN FRANCISCO 
SAN FRANCISCO 
SAN FRANCISCO 
SAN FRANCISCO 
LOS ANGELES 
LOS ANGELES 
LOS ANGELES 
LOS ANGELES 
Los ANGEL! 
“BALTIMOR 
LAS VEGAS 
LAS VEGAS 
WASHINGTON FIELD 
WASHINGTON FIELD 


SAN FRANCISCO 
LOS ANGELES 
BALTIMORE 
PHILADELPHIA 


- THGUSAND “OAKS, CALIFORNIA 08/04/03 08/04/03 


99:06:24 Page: 4 
At Date Set Assigned Status 


08/08/03 08/08/03 
08/08/03 08/08/03 
08/08/03 08/11/03 
08/08/03 08/08/03 
08/08/03 08/08/03 
08/08/03 08/08/03 
08/08/03 08/27/03 


VALLEJO, CALIFORNIA 08/04/03 08/04/03 
DAVIS, CALIFORNIA 08/04/03 08/04/03 
FRESNO, CALIFORNIA 08/04/03 08/04/03 
SACRAMENTO 08/04/03 08/04/03 
CHICO, CALIFORNIA 08/04/03 08/04/03 


CARMICHAEL, CALIFORNIA 08/04/03 08/04/03 
SAN BRUNG, CALIFORNIA 08/04/03 08/06/03 
MOUNTAIN VIEW, CALIFORNIA 08/04/03 08/06/03 
HOLLISTER, CALIFORNIA 08/64/03 08/06/03 
SAN FRANCISCO, CALIFORNIA 08/04/03 08/06/03 
PLEASANT HILL, CALIFORNIA 08/04/03 08/04/03 
HOLISTER, CALIFORNIA 08/04/03 08/06/03 
SAN FRANCISCO, CALIFORNIA 08/04/03 08/06/03 
DALY CITY, CALIFORNIA 08/04/03 08/06/03 
SANTA ANA, CALIFORNIA 08/04/03 08/04/03 
NEWPORT BEACH, CALIFORNIA 08/04/03 08/04/03 
UCAIPA, CALTEORNIA ee. 8, 103, 08/04/03 


MORENO VAL VALLEY, CALIFORNIA 08/04/03 of 08/04/03 
“yoRTH POTOMAC, MARYLAND 08/04/03, 13 08/04/03 


LAS VEGAS, NEVADA 08/04/03 08/04/03 
SPARKS, NEVADA 08/04/03 08/04/03 
CENTREVILLE, VIRGINIA 08/04/03 08/05/03 
ALEXANDRIA, VIRGINIA 08/04/03 08/05/03 


PHILADELPHIA PHILADELPHIA, PENNSYLVANI 08/04/03 08/11/03 
ALBUQUERQUE CEDAR CREST, NEW MEXICO 08/04/03 08/04/03 
MEMPHIS MEMPHIS, TENNESSEE 08/04/03 08/06/03 
DENVER COLORADO SPRING, COLORADO 08/04/03 08/04/03 
STEOUES SAINT LOUIS, MISSOURI 08/04/03 08/04/03 
NEW ORLEANS MONROE, LOUISANNA 98/04/03 08/13/03 
PHOENIX TUCSON, ARIZONA 08/04/03 08/06/03 
CYBER WASHINGTON, DC 08/04/03 08/05/03 
LAS VEGAS LAS VEGAS 08/01/03 08/04/03 
NEW YORK NEW YORK 08/01/03 
p wneeNEWLYORK,NY |, 07/24/03 08/96) 
CLINTON TOWNSHIP, HICHIGA 07/09/03 O7/14/ 
SACRAMENTO CARMICHAEL, CALIFORNIA — 07/09/03 07/09/03 
WASHINGTON FIELD ARLINGTON, VIRGINIA 67/09/03 07/23/03 
CINCINNATI LAKEVIEW, OHIO 07/09/03 07/14/03 
MEMPHIS CORDOVA, TENNESSEE 07/09/03 07/10/03 
NEW HAVEN CANTON, CONNETICUT 07/09/03 07/10/03 


c 
c 
c 
c 
c 
c 
c 
c 
c 
c 
ct 
c 
c 
c 
c 
c 
c 
Cc 
c 
C. 
c 
c 
c 
AL 
c 
A 
c 
c 
c 
c 
c 
Cc 
c 
c 
Cc 
A 
c 
c 
c 
c 
c 


SAN FRANCISCO, CALIFORNIA 07/09/03 08/06/03 
STUDIO CITY, CALIFORNIA 97/09/03 08/12/03 
FELTON, DELAWARE 07/09/03 07/19/03 
SELLERSVILLE, PENNSYLVANI 07/09/03 07/11/03 


c 
c 
c 
c 
c 
Cc 
Cc 
Cc 
c 


FBI(19-cv-1495)-1031 


List Lead for Case 


ICMCPRO7 
09:06:24 Page: 5 


09/07/04 
Case Id Serial.Lead Set To At Date Set Assigned Status 

HOUSTON VICTORIA, TEXAS 07/99/03 07/09/03 ¢ 
CLEVELAND ALLIANCE, 0810 07/99/03 07/10/03 ¢ 
OKLAHOMA CITY OKLAHOMA CITY, OKLAHOMA 07/09/03 07/11/03 ¢ 
NEWARK RIVERTON, NEW JERSEY 97/09/03 07/16/03 ¢ 
SEATTLE SILVERDALE, WASHINGTON 97/09/03 07/09/03 
SAN DIEGO REDONDG BEACH, CALIFORNIA 97/09/03 07/16/03 
INDIANAPOLIS COLUMBUS, TNDIANA 97/09/03 97/10/03 c 
PORTLAND PORTLAND, OREGAN 97/09/03 87/11/03 c 
OMAHA CLARKSON, NEBRASKA 97/09/03 07/14/03 c 
NELWAUKEE WILLIAMS BAY, WISCONSIN 07/09/03 07/11/03 Cc 
LITTLE ROCK BISMARCK, ARKANSAS 97/09/03 07/09/03 c 

| NIAMI VERO BEACH, FLORIDA 97/09/03 07/10/03 c 

| JACKSONVILLE GULF BREEZE, FLORIDA 07/09/03 07/14/03 c 
CHICAGO OAK FOREST, ILLINOIS 07/09/03 07/16/03 ¢ 
SPRINGFIELD ROCK ISLAND, ILLINOIS 07/09/03 07/09/03 ¢ 
MINNEAPOLIS MINNEAPOLIS, MINNESOTA 07/09/03 07/09/03 ¢ 
HONOLULU HONOLULU, HAWAII 07/09/03 07/11/03 & 

| BOSTON SOMERVILLE, MASSACHUETTS 07/09/03 07/10/03 ¢ 
LAS VEGAS RENO, NEVADA 07/09/03 07/15/03 ¢ 
DENVER COLORADO SPRINGS, COLORAD 07/09/03 07/09/03 ¢ 
DALLAS ARLINGTON, TEXAS 07/09/03 07/15/03 ¢ 
ATLANTA ATLANTA, GEORGIA 07/09/03 07/15/03 ¢ 
CYBER WASHINGTON, DC 07/09/03 07/10/03 ¢ 
PHILADELPHIA ELIZABETRTOWN, PA 07/10/03 07/11/03 ¢ 
PHILADELPHIA NORRISTOWN, PA 07/10/03 07/11/03 A 
[HINNEAPOLTS BOWDLE, SOUTH DAKOTA 07/14/03 07/14/03 ¢ 
CINCINNATI DAYTON, OKIO 07/15/08 07/15/03 c 
LAS VEGAS HENDERSON, NEVADA 07/15/03 87/16/03 c 
LAS VEGAS INCLINE VILLAGE, NEVADA 07/15/03 67/15/03 c 
LAS VEGAS LAS VEGAS, NEVADA 07/15/03 07/16/03 ¢ 
JACKSONVILLE ORMOND BEACH, FLORIDA 07/18/03 07/18/03 A 
[DETROIT TANSING, Hl 97/21/03 07/24/03 A 
BOSTON PROVIDENCE, Ri 07/24/03 07/24/03 C 
BOSTON MIDDLETOWN, RI 07/24/03 07/24/03 
BOSTON NORTH KINGSTOWN, RI 07/24/03 07/24/03 & 
BOSTON NORTH KINGSTOWN, RI 07/24/03 07/24/03 ¢ 
PHILADELPHIA ELIZABETHTOWN, PENNSYLVAN 08/06/03 08/06/03 & 
PHILADELPHIA ELIZABETHTOWN, PENNSYLVAN 08/06/03 08/06/03 & 
DENVER LITTLETON, co 11/25/03 11/25/03 c 
DENVER DENVER, CO 11/25/03 11/25/03 ¢ 
DENVER DENVER, CO 41725/03 11/25/03 ¢ 
NEW YoRK NEW YORK, HY 02/20/03 c 
NEW YORK NEW YORK 11/19/02 11/20/02 ¢ 
NEW YORK NEW YORK, NY 11/15/02 11/20/02 c 
WASHINGTON FIELD WASHINGTON, OC 09/13/02 09/16/02 ¢ 
PHILADELPHIA PHILADELPHIA 99/13/02 09/17/02 _ A 
SAN FRANCISCO SAN FRANCISCO 09/13/02 09/16/02 C 
NEW YoRK REW YORK 08/20/02 08/20/02 ¢ 
NEW YORK NEW YORK, NY 04/19/02 05/02/02 & 
NEW YORK NEW YORK 03/22/02 04/14/02 
ALBANY 03/19/02 03/19/02 & 
ALBUQUERQUE 03/19/02 04/01/02 t 
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ANCHORAGE 03/19/02 03/19/02 & bIE —3 
ATLANTA 03/19/02 03/26/02 ¢ : 
BALTIMORE 03/19/02 03/19/02 
BIRMINGHAM 03/19/02 03/19/02 
BOSTON 03/19/02 03/20/02 Ct 
BUFFALO 03/19/02 03/26/02 c 
BUTTE ITC 03/19/02 03/19/02 c 
CHARLOTTE 03/19/02 04/01/02 
CHICAGO 03/19/02 03/22/02 
CINCINNATI 03/19/02 03/19/02 & 
CLEVELAND 03/19/02 03/28/02 Cc 
COLUMBIA 03/19/02 03/19/02 
CRIT INCIDENT RESPO 03/19/62 03/20/02 
DALLAS 03/19/02 03/20/02 C 
DENVER 03/19/02 03/20/02 
DETROIT 03/19/02 03/25/02 C 
EL PASO 03/19/02 03/22/02 C 
FORT MONMOUTH ITC 03/19/02 03/19/02 Cc 
HONOLULU 03/19/02 03/19/02 C 
HOUSTON 03/19/02 03/21/02 
INDIANAPOLIS 03/19/02 03/26/02 C 
a | 03/19/02 03/19/02 C . 
JACKSONVILLE 03/19/02 03/21/02 C 
KANSAS CITY 03/19/02 03/19/02 C 
KNOXVILLE 03/19/02 03/21/02 C 
LAS VEGAS 03/19/02 03/19/02 ¢ 
LITTLE ROCK 03/19/02 03/22/02 Cc 
LOS ANGELES 03/19/02 03/20/02 t 
LOUISVILLE 03/19/02 03/20/02 ¢ 
MEMPHIS 03/19/02 03/19/02 c 
MIAMI 03/19/02 05/30/02 c 
MILMAUKEE 03/19/02 03/20/02 
MINNEAPOLIS 03/19/02 03/19/02 
MOBILE 03/19/02 03/19/02. 
NEW RAVER 03/19/02 03/22/02 
NEW ORLEANS 03/19/02 04/08/02 C 
NEWARK 03/19/02 04/07/03 
NORFOLK 03/19/02 03/20/02 Cc 
OKLAHOMA CITY 03/19/02 03/25/02 
OMAHA 03/19/02 03/20/02 
PHILADELPHIA 03/19/02 03/20/02 
PHOENIX 03/19/02 04/04/02 
PITTSBURGH 03/19/02 03/22/02 C 
POCATELLO ITC 03/19/02 03/19/02 c 
PORTLAND 03/19/02 03/21/02 t 
RICHMOND 03/19/02 03/19/02 Cc 
SACRAMENTO 03/19/02 03/19/02 c 
SALT LAKE CITY 03/19/02 03/19/02 c 
SAN ANTONIO 03/19/02 03/21/02 
SAN DIEGO 03/19/02 04/01/62 ¢ 
SAN FRANCISCO 03/19/02 03/29/02 
SAN JUAN 03/19/02 03/19/02 Cc 
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Networking 


When is hacking a crime? 


By Robert Lemos 
Special to ZDNet 
September 23, 2002, 4:32 AM PT 


Kevin Finisterre admits that he likes to hew close to the ethical 
line separating the "white hat" hackers from the bad guys, but 
little did he know that his company's actions would draw threats 
of a lawsuit from Hewlett-Packard. 


This summer, the consultant with security firm Secure Network 
Operations had let HP know of nearly 20 holes in its Tru64 operating 
system, But in ate July, when HP was finishing work to patch the 
flaws, another employee of Finisterre's company publicly disclosed 
one of the vulnerabilities and showed how to exploit it-prompting the 
technology giant to threaten litigation under the Digital Millennium 
Copyright Act. 


Finisterre, who was not hired by HP, now says he'll think twice 
before voluntarily informing another company of any security holes 
he finds. 


" vy advertisement 
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a2) 
want to be—black hat or white hat," the 22-year-old consultant said. 


In recent months, hackers of all backgrounds have been forced to 
tethink their practices while facing a roundhouse combination of the 
DMCA, heightened law enforcement activity and deeper scrutiny by 
employers. 


The issue pits two extremes against one another. At one end are the 
corporate-security experts who wear their metaphorical white hats 
because they adhere strictly to regulations and tend to believe that 
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software vulnerabilities should be disclosed only to the software 
maker or a trusted third party. At the other are the black hats who are 
generally interested only in gaining access and breaking security. 


In the middle are the gray 
hats, who are finding their 
once-acceptable acts, such 
as informing the public of 
company security holes, 
could now land them in jail. 


DEFINING 
hacker 


| Who is a hacker? 


In the most general sense, a 
{| "hacker" is someone who enjoys 
modifying and subverting 
i systems, whether technological, 
4 bureaucratic or sociological. 


Even the White House has 
weighed in on the 
controversy. While, 
acknowledging the need for 
third-party discovery of 
flaws, President Bush's 
cybersecurity team believes 
that more stringent ethics 
need to be the rule, rather 
than the exception. 


Most often the ferm is used to 
describe someone who has 
learned about technology by 

E picking apart systems. 


} In the past decade, however, 

| "hacker" has come to describe 

| those people with a hands-on 
interest in computer security and 
circumventing such security. 


“We are reaching a 
crossroad where decisions 
have to be made as to which 
way people are going to go: 
Are they going to continue to 
function as a security 
consultant or go to the dark side?" said Howard Schmidt, vice 
chairman of the White House's Critical Infrastructure Protection 
Board. 


That sentiment is echoing across the once-vast gray area where the 
majority of today's serious hackers toil. With law enforcement and 
corporate legal departments increasingly on the attack, many 
security experis are worrying that the next bug they discover or tool 
they create could get them sued or prosecuted. 


“You can't do anything these days," complained H.D. Moore, a 
security expert and hacker for network protection firm Digital 
Defense. "It used to be that you could hack a box and people would 
say, ‘Ah, it's just a stupid kid.’ Now it's a mission-critical server you 
just hit, and that's terrorism." 


Making the situation more difficult is the amorphous definition of 
ethical hacking. Although the subject has been addressed 
extensively in flaw and ethics philosophy, rarely a month goes by 
without a debate over whether a particular vulnerability had been 
disclosed responsibly. 


The term “gray hat" was originally coined by the LOpht~one of the 
best-known old-school hacking groups, pronounced "the loft"-for 
those who wanted to stand apart from corporate security testers but 
also distance themselves from the notorious black hats. The 
category defined by this phrase has come to encompass most 
independent security experts and consultants, as well as many 
corporate security researchers. . 


“We chose the term ‘gray hat' to represent the independent 
researcher who didn't have a vested interest in any particular 
company or product," said Chris Wysopal, director of research and 
development for security firm @Stake, a company that had been 
formed out of the core group of LOpht hackers. Wysopal himself went 
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by “Weld Pond” when he was part of the LOpht. 


But others don't believe that a gray area should exist, even for 
hackers who break into a company's servers only to inform its 
network administrators about the vulnerabilities--a technique made 
famous by itinerant hacker Adrian Lamo. He has found his way into 
the networks of WorldCom, the New York Times, America Online 
and Excite@Home before breaking the news to the company or, 
more often, to the press. 


To those like Peter Lindstrom, director of security strategies for the 
Hurwitz Group consultancy, Lames and others of his ilk are criminal 
hackers, 


"If you are gray, you are black," Lindstrom said. "It's not that [ don’t 
understand what they are trying to do, but it comes down to what you 
are actually doing." 


When hackers attack a network, an administrator has few ways to 
judge their intent. Every incident must be treated as an emergency, 
Lindstrom maintains, so every trespasser should be treated as a 
criminal. 


That point of view may be in the minority today, but it's rapidly 
gaining support. The trend is lending new strength to such laws as 
the Digital Millennium Copyright Act 


Cracking down on grays 

Last year, the FBI arrested Russian programmer-cum-hacker Dmitri 
Sklyarov for violating the criminal provisions of the DMCA by 
producing a program that could circumvent the copy protections 
surrounding Adobe Systems' e-book format. Adobe forced the issue 
with the FBI and then backed off amid wide criticism. Now the 
Justice Department is pursuing the case against Sklyarov's 
company, Elcomsoft. 


The arrest has worried those who find holes in software. At this 
year's Defcon hacking conference, some international researchers 
doubted they would attend in 2003, given the turn in the U.S. legal 
environment. 


*The DMCA is so vague and complex and confusing,” said Jennifer 
Granick, a defense lawyer and clinical director at Stanford 
University's Center for Internet and Society. "This is the most serious 
problem." 


The DMCA has become a favorite legal weapon of the software and 
media industries to silence critics and security experts, despite 
exemptions written by the Library of Congress for security research. 
Princeton University professor Edward Felton delayed presenting his 
findings regarding the security of several music standards when the 
Recording Industry Association of America threatened him with a 
lawsuit. 


In addition to the case against ElcomSoft, the FBI is reportedly 
investigating Lamo for his hacking of a database that contained 
contact information for New York Times columnists. 


Internal affairs 

Many security companies, such as Digital Defense, Internet Security 
Systems and @Stake, trumpet the fact that they hire hackers as part 
of their cachet. Oracle even maintains a staff of its own homegrown 
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hackers, bringing in outsiders only on occasion, said Chief Security 
Officer Mary Ann Davidson. 


“| use the term ‘hacker mostly in a term of professional respect," she 
said. "| don't believe in blaming the research community for our own: 
failings, but we should let light in on the situation." 


Others, however, operate on a don't-ask, don't-te!l policy. 


"Companies say, ‘We don't hire hackers.’ But you go there and they 
have a room full of them,” said “md5," a member of the 
GhettoHackers, a Seattle-area group of white hats. 


Today's security-conscious climate means that programmers and 
hackers have to pay more attention to politics and laws, a new 
sensitivity that some believe has discouraged them from notifying 
companies of vulnerabilities. 


"There are a lot of (flaws) still being discovered, but no one is 
releasing them," Moore said. While lists such as Bugtraq continue to 
post flaws, he added, “interesting” vulnerabilities aren't being 
disclosed as often. 


The recent experience of Secure Network Operations is a case in 
point. Finisterre--who also goes by “dotslash"--has not changed his 
philosophy, but his company has become far more wary of 
publicizing security flaws. "We are more treading on water when we 
approach a vendor now, because what HP did scared the crap out of 
us," he said. 


Hats of the future 

The debate has given rise to some new possible guidelines for 
defining hacker ethics. For some time, a hacker known as Rain 
Forest Puppy has adhered to a policy that spelis out how a security 
tesearcher and a sofware maker should communicate. At its core, 
the so-called RFPolicy quidelines recommend that a software 
company give updates to the researcher every five days. 


@Siake’s Wysopal co-authored a more formal set of rules for 
researchers that advocates more leniency for software makers. 
Rather than five days, the report asked researchers to give a 
company seven days to respond and 30 days to make a good-faith 
attempt to fix the problem. 


Oracle's Davidson said such guidelines begin an important dialogue. 
“Not to excuse ourselves for sitting on our keisters, if that's what we 
are doing, but to say, ‘Step into our shoes," she said. “Hackers only 
have to find one hole to make a name for themselves, but we have to 
find all of them." . 


And as companies and law enforcement agencies focus increasingly 
on the vulnerabilities of critical networks and systems, those 
considering themselves gray hats may not have much longer fo play 
in the middle of the road. 


"| think that we have seen a shift in people and their focus to do the 
right thing,” said Schmidt of the White House cybersecurity team. 
“No matter what color your hat, you need to realize that there is a 
greater dependency on networks today." 


Page 4 of 6 


FBI(19-cv-1495)-1040 


News: When is hacking a rin. 


Gi Emaitthis (5) Print this 


Also on ZDNet 


» Find the tech gear you need in CNET's Back to School guide. 

> Get ahead of the competition with the BizTech Library. 

» Improve your PC's performance with the Memory Configurator. 
Don't miss up-to-the-minute IT commentary on TechRepublic's 
blog. 

* Laid off? Find a new IT job today in our Career Center. 


TalkBack: Post your comment here 


Re: When is hacking a crime? steve megrew 

Re: When is hacking a crime? william Beach 

T think it is a crime Kevin Ray 

Re: I think it is a crime Max vaysburd 

Re: I think it is a crime Kevin Hughes 

Re: I think it is a crime My Ass * 

Re: When is hacking a crime? Don Jackson 

Post Anonymously Zarlat Zeigfield 

Re: When is hacking a crime? Dom Bethel 11 

(NT) Dom...the world is simply not that Black & 
White! Raymond Cote 


(NT) (NT) Yes, it generally *is* that Black & White! charles 
Otstot 


Re: Dom...the world is simply not that Black & Whi_ steve 
megrew 


Re: When is hacking a crime? Don Jackson 

Re: When is hacking a crime? Stewart Cannon 

Re: When is hacking a crime? Don Jackson 

Re: When is hacking a crime? steve megrew 

Hmmmm... anonymous posting? Brian Hogan 

(NT) Brian...recognition=money they worked hard 
for! Raymond Cote 


Re: Brian...recognition=money they worked hard for srian 
Hogan 
Re: Brian...recognition=money they worked hard Kevin Hughes 


Re: Brian...recognition=money they worked hard for steve 
megrew 


Code Red, Full Disclosure and Product Recalls. David Mohring 


Re: Code Red, Full Disclosure and Product Recalls. Charles 
Otstot 


Re: Code Red, Fult Disclosure and Product Recalls. bon Jackson 
White Hats disclose, too Harry Flowers. 

Re: When is hacking a crime? Don Jackson 
Re: When is hacking a crime? Charles Otstot 
Re: When is hacking a crime? 0on Jackson 
Re: When is hacking a crime? Charles Otstot 
Re: When is hacking a crime? sean kK 

Re: When is hacking a crime? Charles Otstot 
Re: When is hacking a crime? George Geddis 
Re: When is hacking a crime? Charles otstot 
Re: When is hacking a crime? steve megrew 
Re: When is hacking a crime? Charles Otstot 


Page 5 of 6 


FBI(19-cv-1495)-1041 


News: When is hacking a i 


: When is hacking a crime? 
: When is hacking a crime? 
: When is hacking a crime? 
: When is hacking a crime? 
+ When is hacking a crime? 
hen is hacking a crime? 
fhen is hacking a crime? 
Re: When is hacking a crime? 
Re: When is hacking a crime? 
Re: When is hacking a crime? 
Re: When is hacking a crime? 


DMCA equals a gag-order on liability disclosures geoff greene 
Re: When is hacking a crime? Dennis Parr 


Apple & oranges Paul Berry 


Re: When is hacking a crime? George Kassing 


}More Replies 


Page 6 of 6 


Garwes: IT Jobs | New WebFerret | Premium Research | Web Hosting | Windows XP Guide 


CNET Networks: Builder | CNET | GameSpot | mySimon | TechRepublic | ZDNet 
About Us | Support | Your Privacy | Service Terms | Advertise | ZDNet Jobs 


AU 


Copyright © 2002 CNET Networks, Inc. All rights reserved. ZDNetis a registered service mark of CNET Networks, Inc. ZDNet Logo i 


CNET Networks, inc. 


FBI(19-cv-1495)-1042 


[ye 
UPLOADS 

WITHTEMT__# 

ITH AT TERT, 


BY. keh ge TE 
g Tals 


DATE. 


FBI(19-cv-1495)-1043 


b3 -2 
05/07/2003 es 
CAH :cah 
The attached news; f er articles were taken from the Internet regarding the hack of 
Worldcom by eases (LAMO. > 
A copy will be’ maintained in the file. 
a 


rs) rn 


FBI(19-cv-1495)-1044 


SecurityFocus HOME News: Ly Adventures in WorldCom : Page 1 of 5 


MyAccount | AboutUs } Media Kit 


. 4 


SecurityFocus ™ 4 


StillSecure” 


Entire Site ia 


Free Analyzer Download 


NEWS 
<< Printable version >> 

Report: ~ 
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May 02, 
Lamo's Adventures in WorldCom 

RIAA me 
The helpful hacker strikes again, this time finding a route into the communications company's faces car 


private Web, then telling its security staff all about it, Who is Adrian Lamo, why does he do this, Apr 30, 
and woutd his life be the same if Kinkos kicked him out? 


By Kevin Poulsen, SecurityFocus Dec 5 2001 11:46AM ae 
Apr 25,7 
It's dusk in San Francisco, and at a Kinko's copy shop deep in the financial district Adrian Lamo 
shrugs off his overstuffed backpack and pulls out a battered Toshiba laptop. With a few DirecTV | 
keystrokes, the hacker fills the computer's dispiay with a map of the United States, crisscrossed Guilty 
with hundreds of colored lines, crowded with geometric symbols and tiny text. Apr 24, < 
On tnspection, the map charts in astonishing detail the physical infrastructure underlying much of 
the Internet: underground cables, repeaters, satellite earth stations, junctions, terminals, and the ©=—-——~ 
cable heads where a dozen transoceanic cables come ashore. As a trophy, however, the one- 
megabyte PDF file's most salient feature is a detail in the tower right hand corner, a warning in FROM T 
bold red, "RESTRICTED DO NOT REPRODUCE.” Another notice reads, "Not to be reproduced in any EarthLint 
manner or disclosed to unauthorized individuals," and a third warning runs sidewise up the edge = spam E- 
of the map: "WorldCom RESTRICTED,” May 07, 
WorldCom is the latest target of a clean-cut 20-year-old hacker who's aiready drawn national Ferreting 
attention discovering, exploiting, and then warning about serious security lapses at AOL, Piracy 
Excite@Home, Yahoo! and Microsoft. Like those other companies, security staff at the $20 billian May 07 
communications giant might be surprised to tearn they were compromised by a lone vagabond Earthlink 


hacker who lives out of a weathered L.L. Bean backpack and does most of his work from Kinko’s the Buffe 


‘laptop stations," using little more than a Web browser and his wits. May 07, 
‘All the interestin: 
thi thath 8 "The downside is, I'm running out of major U.S. corporations," says Compute 
ngs thet have Lamo, as he plugs the Toshiba into the copy shop's free Internet link, nee 
happened to me and summons a Netscape window. ua 
have been the result a 06, 
of synchronicity and Web applications are an overlooked chink in many organizations’ ‘ 
organized chaos.’ network security armor, Lamo explains. Sometimes, the weakness is 
Adan Carne an improperly configured acess Control _ (ACL) that allows 
anyone on the Internet to visit an application that should be 
http://www.securityfocus.com/news/296 7/7/2003 
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‘ ¢ 
restricted. Other times, network administrators deliberately leave secret Web page wide open, 
counting on nobody stumbling across the URL. 


Lamo is a master of this unlisted Web. He can direct you to the Web site at Apple Computer that 
yields a trove of detailed circuit diagrams and schematics, marked “proprietary,” but available to 
anyone with knowledge of the URL. He knows a particular Web address at the prestigious Journai 
of Commerce (JoC) that routes to an unprotected administrative tool that grants access to the 
publication's database of online subscribers, their names, email addresses and passwords. Credit 
card numbers aren't displayed, but Lamo "theorizes" that one out of five passwords would also 
work on the subscriber's mail account. (JoC Online editor Stuart Chirls declined to comment.) 


The hacker makes his discoveries during marathon all-night sessions in front of his faptop. He 
scans Internet address ranges for undocumented Web servers, or uses well-known software bugs 
to find the names of private files on otherwise-public servers. Sometimes, he just guesses. At any 
given moment, Lamo has a long list of "interesting" Web sites he may or may-not jook into 
further, depending on the vagaries of his ever-shifting curiosity. 


Some of the ones he has looked into have made news, In September, Lamo discovered an 
exposed server at Microsoft that gave anyone with knowledge of the URL access to billing, 
shipping and purchasing data for any customer who purchased Microsoft products online. Eartier 
the same month, he used an exposed Web-based production tool to tamper with a wire service 
story on Yahoo! News, deliberately choosing an aid story to minimize the impact. 


The Problem with Proxies 

As he has with other networks, Lamo found the keys to WorldCom's kingdom in open Internet 
proxy servers. In normat operation, a proxy server is a dedicated machine that sits between a 
local network and the outside world, passing internal surfers' Web requests out to the Internet, 
often caching the results to speed up subsequent visits to the same URL. 


But it's easy and common for administrators to inadvertently misconfigure proxy servers, allowing 
anyone on the Internet to channel through them. Sometimes companies and organizations even 
unknowingly run proxies. Hackers and privacy-conscious netizens catalog these open proxies, 
using them to anonymize their surfing. Lamo has perfected a different use: jumping through them 
to pose as a node on a company's internal network. 


Using a common hacker tool called "Proxy Hunter," Lamo scanned WorldCom's corporate Internet 
address space, and quickly found five open proxies -- one of them hiding in plain site at 
wireless.wcom.com. From there, he needed only te configure his browser to use one of the 
proxies, and he could surf WorldCom's private network as an employee. 


Once inside, he found other layers of security protecting varicus intranet sites from employees 
who might exceed their authorized access. But after a couple of months of sporadic exploring, 
Lamo has made substantial inroads. He can use WorldCom human resources system to list names 
and matching social security numbers for.any or ait of the company’s 86,000 employees. With this 
information, all he needs is a birth date (he swears by anybirthday.com) and he can reset an 
employee's password and access his or her payroil records, including information like their salary, 
emergency contacts, and direct deposit instructions, complete with bank account numbers. He 
could even modify the employee's direct deposit bank account, and divert a paycheck to his own 
account, if he wanted to. "A lot of people would be willing to blow town for a couple hundred 
thousand dollars,” says Lamo. 


http://www.securityfocus.com/news/296 17/2003 


FBI(19-cv-1495)-1046 


Securityf ocus HUME News: “ey Adventures i WorldCom Page 3 Of > 


IMORE FROM SECURITY FOCUS...| 


RELATED STORIES He has some access to customer records, too, primarily 


Hackers Harvest subscribers to WoridCom's data services. He can browse 
Passwords from DSL. 


Routers 


notes and circuit diagrams for AOL’s new T1 cross border link 
lews Hacked between its Virginia offices and AOL Mexico, and a detailed 
Proxy Exposes engineering order for a connection between the World Bank's 


xcite@Home Data Washington headquarters and its Buenos Aires resident 
« Hackers Steal AIM mission 
Accounts : 


More significantly, he can control a Web appiication called the Web Access Router Maintenance 
tool (WARM). The tool is a legacy from one of WorldCom's acquisitions, ANS Communications, 
purchased from AOL in 1997 for $175 million. WARM gives its users access to all of the routers on 
the private wide area networks provisioned by ANS. The list of customers is long, and includes. 
Bank of America, JP Morgan, Citicorp, Sun Microsystems, and AOL itself. With a little 
manipulation, Lamo was able to pull down dial-up phone numbers and passwords for many of the 
routers, which would give him direct access to the networks. WARM is accessible to anyone on 
WorldCom's intranet, Lamo says, protected only by a Javascript password routine that's plainly 
readable in the source code for the page, which is to say, not protected at all. 


“For everyone at WordCom, the intranet is this boring thing that comes up in their web browser," 
says Lamo. “For me, it's a massive playground that's slowly and inexorably crumbling away at 
their security infrastructure." 


No Forwarding Address 

| A worker glances at Lamo from behind the counter, then turns his attention back to a print job. 
! "The nights I'm alone in the city and I have nowhere to crash, I spend ail night in the Kinko's,” 
Lamo says. “They never kick you out.” 


One could call the copy shop chain Lamo’s home-~away-from-home, except that he has no home 
to be away from. The hacker leads a deliberately nomadic existence, traveling the country by 
Greyhound, crashing with friends, sometimes steeping in abandoned buildings, always fugging the 
backpack that contains such necessities as a first aid kit, a thermal blanket, a change of clothes, 
the laptop with two missing keys. 


When he was 17, Lamo's parents moved from San Francisco to the 
quieter environs of Sacramento, 80 miles to the east. Addicted to 
city tife, Lamo chose to stay behind. He'd already tested out of high 
school and was performing computer work for non-profit groups, 
sometimes sleeping in their offices at night. Later, he did three 
months of network security consulting for Levi Strauss -- the only 
paid security work on his résumé -- and six months with a San 


Adnan Lame does most af his hac: 
Francisco private investigator that he doesn't like to talk about. vath an ordinary Web browser, 


Today, Lame lives off a modest savings, and spends most of his time in San Francisco and the 
suburbs of Washington D.C. -- both regions where he lived growing up, during a childhood that 
also included three years in Colombia. He sometimes stays with his parents in Sacramento, but 
wherever he goes, he becomes restless in he lingers in one place for too long. "I much prefer 
being mobile,” he says. Nonetheless, Lamo doesn't know how to drive a car, relying instead on 
public transportation. For tong distances, he prefers the bus over airliners or rail because he likes 
the atmosphere. “On Greyhound, you know you're America... Also, it's the last mode of transit 
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that doesn't require identification." 


Something of an urban explorer, Lamo sometimes goes ‘dumpster diving' with friends, 
rummaging for interesting papers, manuals and other corporate artifacts amid downtown San 
Francisco's towering office buildings. A recent trip to Washington found Lamo trudging through 
the flooded remains of a long-abandoned electric plant along the James river, At 20, the hacker 
admits he doesn't yet know what he wants to be when he grows up; the question itself is absurd. 
"I don't feel obligated to set goals," says Lamo. "Ali the interesting things that have happened to 
me have been the result of synchronicity and organized chaos." 


Putting himself in situations where "interesting things" can happen seems to motivate Lamo. 
Curiosity drives him as well. In a way, his Internet hacking is a natural extension of-his real-life - 
exploration. Born three years before the Macintosh, Lamo is part of the first generation of 
Americans to never know a society without personal computers -- a generation more comfortable 
than any before with the digital world. A WorldCom marketer might call him "Generation D." in 
fact, the company has another way of describing Adrian Lamo. 


The Helpful Hacker 

"Vint Cerf recently did a public service announcement in which, generally speaking, the message 
was it would be really great if the hacker community went back to its roots,” says WorldCom 
spokesperson Jennifer Baker. "I guess that from a general industry standpoint, Adrian seems to 
be doing just that... At that end of the day, what he did wasn't destructive or harmfut.” 


Over a month after the Kinko's visit, Lammo has come clean with WorldCom, and the company is 
grateful. The hacker contacted the communications feviathan through SecurityFocus on Friday. 
Saturday morning, just as he crashed after an all-night hacking session on "an unrelated project," 
his cell phone rang. There were three WorldCom managers on the line, wondering of it was true 
that Lamo had cracked their global corporate intranet, and what they needed to do to fix it. 


"I made it clear very quickly that all 1 was interested in doing was make it as positive an 
experience as possible for everyone," says Lame. True to his word, the hacker would spend the 
rest of the weekend on conference calls and in email, bleary briefing the company on his months 
of illicit exploration. On Tuesday, the WorldCom turned to Lamo to give them a final bill of heaith. 
After a scan of their address space, he pronounced that WorldCom had successfully closed the 
proxy hole. 


"What we discovered when we investigated Adrian's issues, was that there was a router with an 
inappropriate filter on it," says Baker. "In the end it was a human error, and we're really happy 
that he brought it to our attention... We really appreciate his efforts to work with us" 


That instant willingness to cooperate, even to sign a non-disclosure agreement, with no strings 
attached is part of what's kept Lamo out of legal trouble, for what are indisputably violations of 
federal computer crime law. In May, when the hacker used an open proxy to crack ailing 
Excite@Home's internal Web, adding himself to the corporate directory and finding a route to 
millions of subscribers’ records, he walked into the company's Redwood City, Calif. headquarters 
to brief network administrators in person, and he didn't leave before heiping them ptug the hole. 


Tt also helps that Lamo's never tried to profit from his hacking. "There's an intangible something I 
can lay claim to now that would be irretrievably lost if I did," Lamo says. The fact that he doesn’t 
hide behind a "handie" or pseudonym makes a difference, too. And once inside a network, there 
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are fines -- particularly sensitive areas -- that he doesn't cross. 


Lamo prefers the term "security researcher" to "hacker," and steers clear of the usual cyberpunk 
justifications for his probing: he isn't trying to make the Internet a safer place. "I do what I do, 
there's no particular motive I can describe.” At the same time, he wouldn’t mind seeing the world 
become safe for his brand of curiosity, for the interactions he's had with some of these companies 
to be the norm. His Is a style of hacking -- open, brash, ilegai, but carefully observant of an 
unwritten code of ethics -~ that went out of style in America at the time of the first hacker 
crackdowns a decade ago, when Lamo was ten years old. "I've always sort of resented the fact 
that people that do what I do are in a position where they feel like they have to run and hide," 
says Lamo. "I'd like it if more people saw curiosity and corporate interests as things that can 
coexist without contradiction." 


In keeping with his philosophy of letting “interesting events" find him, Lamo accepts the 
possibility that someday his Internet exploration may ‘ead to criminal prosecution. So far, that 
hasn't happened, but some of the victims/beneficiaries of his attention worry for him. 


“Because of his approach and what he's doing, maybe he'l! be okay,” says a source at one of the 
companies Lamo's hit in the past. "But the bottom line is, it is unauthorized access, and it's clear 
when you get into a company’s network that there are disclaimers everywhere you go. I suppose 
at seme point he could make the wrong people angry, or the timing could be such that he doesn't 
get a chance to come forward and say, ‘Here's how I did it," because they find him first." 


<tips@securityfocus.com> 
Discussion 
Lamo's Adventures in WorldCom Jim 
Lamo's Adventures in WorldCom watsonian 


Lamo's Adventures in WorldCom kr4ft_din3r@hotmail.com 
[ Discussion Closed ] 
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Hacker had WorldCom i in his hands 


By Robert Lemos 
Staff Writer 
December 6, 2001, 1:30 PM PT 


The curious hacker strikes again. 


Internet backbone provider MCI WorldCom has acknowledged that network-intrusion 
specialist Adrian Lamo used a security hoje in a company Web server to grant himself 
access to its administrative network. 


The quizzical hacker poked around WorldCom's system four times over the past two months, 
ending last Friday when he told the company of the hole and helped it secure a 
misconfigured server. 


“l was looking for something to do,” the sometimes consultant and security researcher said 
of his desire to probe the infrastructure. Lamo considers himself a harmtess intruder, which 
he asserts is far better than one bent on misdeeds. 


"It's definitely better than it would have been if someone wanted to attack Bank of America's 
sites and have it blamed on WorldCom," said Lamo, who is based in San Francisco. In 
addition to Bank of America, WorldCom's customers include America Online, Providian and 
oil titan BP. 


WorldCom apparently agrees with Lamo’s assessment. 


‘We would rather know than not,” said Jennifer Baker, a spokeswoman for the Internet 
service provider. Alihough she would not give details of the discussions the company had 
with Lamo, Baker did say he helped the company. 


"We are definitely appreciative, and we have secured our system,” she said. 


MCI WorldCom is the fourth major company to find itself on the wrong end of a security hole 
exploited by Lamo. Microsoft, Excite@Home and Yahoo have all been tested by Lamo and 
found insecure. 


In the latest case, Lamo exploited a so-called open proxy, a server that is normally used by a 
company fo filter data on an Internet connection but, in this case, had been installed on a 
Web server by accident when the server had been configured. 


Such mistakes are a major problem in computer security, said Chris Wysopal, director of 
research and development for network-protection company @Stake. 
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"Not only are (open proxies) offering anonymity to all comers, but they are allowing people to et ni by 
appear as if they are on their trusted network via proxied IP address," Wysopal said. Gel news 

What j 
Using, for the most part, a run-of-the-mill Web browser, Lamo read WorldCom's Content licen 
documentation on how to use its network and put it to his own use. Lamo “only” gained e 
access to the company's administrative network, Baker said. But Lamo asserts that a Display news 


malicious intruder could have accessed the infrastructure driving the networks of the ISP's 


customers, he said. CNET News.cd 
eet , ; a News 
The access to the administrative network "exposed all the information to dial inte these other ===" 


networks, into their routers,” Lamo said. Because WorldCom configures many of its M4} ees 
customers’ routers, Lamo asserts that he could have done so as well. anoles 
Serve;§s, at 

For example, he said, another hacker could have downed the networks of America Online ae! 
and Bank of America. ees 
4] Daily Disp 

Our award 

For all his good intentions, though, amo isn't exactly on solid legal footing. editors ce 
stories rig! 

inbox. (dat 


Wysopal asseris that poking around the Internet in the way Lamo does aids companies’ 
security and shouldn't be considered illegal. 


"He is not using exploits, merely exploring using public anonymous protocols," Wysopal said. __ All News.com ne 
"This is sort of like wandering around in the woods not caring about invisible property lines | Sra 
that aren't posted, yet respecting fences and No Trespassing signs." 


For his part, Lamo acknowledges that the situation is legally complex but said that his 
personal code of conduct has kept companies from prosecuting him. 


“t don't have any right or moral authority to do what | do,” he said. "| know that I'm on more- 
than-questionable legal grounds.” 


That said, Lamo asserts he isn't doing anything wrong. In the end, the hacker said, he's 
helping companies secure their networks--and having a good time while he's at i. 


“t don't necessarily think that curiosity and corporate interests need to be in conflict,” he said. 
“Pragmatically speaking, this is going to happen. It might as well be the least destructive and 


least harmful experience for everyone involved,” 
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IT professionals have their say: 
silicon.com's third annual skills 


survey reveals ail 

silicon.com has launched its third annual skills survey 
special report, providing an invaluable snapshot of the 
trends and issues affecting today's market for IT 
employment. 


R\ The report 
(ottp://www.silicon.com/skilissurvey2001 ) 


survey of IT professionals conducted over 
the last month. For the first time, the 
survey looks at the pan-European market 
for IT skitls, polling both silicon.com and silicon.de readers. 


Over the next five weeks a variety of video interviews with 
leading industry experts, academics and IT professionals, 
as well as in-depth written coverage, will be published to 
identify key trends and give advice on how companies can 
satisfy their IT skills requirements. 


The survey will reveal whether IT professionais' salaries 
have risen, if contractors have turned to full time 
employment in the face of IR35 legislation, and how users 
generally go about tackling training, skills and new 
technologies. 


In the first video feature, silicon.com's e~society editor Lisa 
Burroughes speaks to David Burrows from Microsoft, Tina 
Poulsen from PwC and Karen Price, CEO of e-skills NTO, to 
find out what's holding back the IT skills market. 


Also published this week fs an analysis on ASPs (application 
service providers) and whether they can provide the 
answer to the skills shortage. 
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This week is your last chance to give your responses to the 
survey and be entered for the prize draw to win a Diamond 
Rio MP3 player. So to have your say, click on: 
http://www.silicon.com/survey2001 
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unconventional way to enter the ‘company network that is not often 
addressed by security experts. He stressed that he didn't attempt to 
damage the internal networks. 


Within the last several months, Lamo has found security problems at 
several major computer firms, including Microsoft and AOL Time 
Warner. In September, he discovered a hole on Yahoo!'s news site 
that allowed him to alter several stories. 


In addition to Worldcom's clients, the company itself was also at risk, 
Lamo said. 


Lamo found ways to reset company passwords, give himself all the 
computer power of a company director, redirect e-mail and find 
personal information for Worldcom's employees. 


"It would have been possible for anyone who was really motivated to 
change direct deposit information for employee paychecks to arbitrary 
accounts without the employee being notified,” Lamo said. 
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Sites Revealed Passwords For Thousands Of Ameritech Users My 
By Brian Krebs, Newsbytes . Fre 
WASHINGTON, D.C. USA., “PE Mall This Article siga 


22 Feb 2002, 1:30 PM CST &) Printer-Friendly Version 


Until earlier today, usernames, passwords and other sensitive information 

for tens of thousands of SBC-Ameritech.net customers were available to 
anyone with a Web browser and the proper Internet address, according to { 
information obtained by Newsbytes. — 


One of the unsecured Ameritech Web sites contained an alphabetical hyperlinked listing 
of dial-up users. Each individual account, when clicked on, automatically created a dial- 
up networking account on the visitor’s computer, complete with the username, password 
and appropriate dial-up phone number for the subscriber's region. 


Another Ameritech site contained + advertisement 
thousands of detailed customer records, 

including unencrypted passwords, phone 
numbers and addresses for each account. 


Ameritech disabled the sites shortly after Money 
Newsbytes notified the company of the Power e 


breach at the request of security 
consultant Adrian Lamo. The consultant Fhet more could 

. . went in an andie: 
said he came across the sites a few weeks 


ago while browsing public Ameritech Web Aaach Washington's top - 
content. visinnaries, onfing and in pri 


The database also listed each customer's 
appropriate mail server address, sign-on 
and password. Armed with such 
information, a malicious intruder could 
simply plug the data into his Microsoft Outlook Express account and download all of the 
users private e-mail. 


Wastiech & 


Another prominent feature on one of the sites was a tool that allowed visitors to track 
the Internet usage for each customer account. Such sensitive information usually is not 
obtainable even by federal investigators without a court order. 


Ameritech spokesperson Denise Koenig said the campany immediately removed the 
directory and restricted access to the sites in question as soon as it was made aware of 
the problem. 


“There’s absolutely no issue that’s more important to us than the security and privacy of 
our customers,” Koenig said. “Although the directory contained aged user ID 


http://www.newsbytes.com/news/02/174719-html 3/11/02 


| 
i 


i 


FBI(19-cv-1495)-1059 , 


Sites Revealed Passwords For Thousands Of Ameritech Users ®@ Page 2 of 3 


information, we're going to take steps to remind our customers to proactively change 
their passwords in accordance with our security guidelines.” 


Koenig said the company still does not know why the sites were ieft unsecured or how 
long they had been’exposed. Ameritech, which was bought by San Antonio-based SBC 
Communications in 1998, serves five states in the Midwest, including Illinois, Michigan, 
Ohio, Oklahoma and Wisconsin. 


A live intruder will inherently see things corporate integrity assurance will miss — 
intrusion cannot be taught at Seminars,” Lamo said. “I’m sure Ameritech does take user 
privacy seriously, but unfortunately, that's just not enough. This is a massive 
implementation error for any company. There's no way around that.” 


Lamo is known for tracking down Fortune 500 company Web sites that employ shoddy or 
nonexistent security measures. Last year, he stumbled upon a similarly unprotected Web 
database containing information on thousands of Microsoft’s customers. 


Last December, Lamo discovered an Internet-accessible Web tool that provided easy 
access to the keys to private network routers for dozens of companies, including AOL 
Time Warner, Bank of America, Citicorp, Fox News Corp., JP Morgan, McDonalds and Sun 
Microsystems - to name just a few. 


Days after the Sept. 11 attacks, Lamo used a proxy on a Yahoo story server to change 
the content of a story on the company’s Web site about Russian programmer Dmitry 
Skiyarov. 


In May, he alerted ExciteAtHome to several rogue proxies on the company’s network that 
left the personal information of nearly 3 million customers and several thousand 
company employees available to even the most marginal of system crackers. 


In the majority of those cases, the Web pages or routers in question were made 
vulnerablé through rogue “proxies,” machines that allow users to route through ~ or into 
~ networks, often skirting past firewalls. Yet, in Ameritech’s case, the customer data 
pages were facing the Internet completely unsecured. 


Ameritech has suffered other Web-based security issues in previous years. Most recently, 
South Bend Hackers Club President Keith Kimmel publicized a strikingly simitar exposure 
on Ameritech’s eBill site. 

“I'd think that this would have left them with a greater awareness of the potential of 
web-based vulnerabilities,” Lamo said. “That said, Ameritech's response to this matter 
was more timely than others they've generated in the past.” 

Reported by Newsbytes.com, http://www.newsbytes.com 
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Adrian Lamo charged with computer crimes 
By Kevin Pouisen, SecurityFocus Sep 5 2003 10:11AM 


FBI agents armed with a federal arrest warrant out of New York were searching for Adrian Lamo 
Thursday, SecurityFocus has confirmed. 


Lamo has been charged in New York under Title 18 U.S.C. 1030 and 1029, according to deputy federal 
public defender Mary French, who says she's spoken with one of the FBI agents that were searching for 
Lamo, The federal laws prohibit unauthorized access to a protected computer, and illegal possession of 
stolen "access devices” -- a term that encompasses passwords, credit card numbers, and the like. French 
did not know what the specific allegations were, because the charging document is sealed. 


Two agents visited the home of Lamo's parents, Mario and Mary Lamo, near Sacramento, California, 
Thursday afternoon, Mary Lamo said Thursday. “They wouldn't tell us anything but that they had an 
arrest warrant and they wanted to come in,” she adds. 


When she demurred, the agents vowed to return with a search warrant, then began overtly watching the 
house from parked cars, she said. “They followed me when I went out, so they're not hiding it.” 


Friday morning, a spokesperson for the U.S. Attorney's office in New York confirmed that the office had 
an open case file on Lamo, but otherwise declined to comment. 


Lame frequently stays at his parents' home, but he was not there at the time of the FBI's visit, and has 
hot returned since, His mother contacted the Federal Public Defender's office in Sacramento, which has 
agreed to handle his surrender. 


‘Thave always said "If he's arrested or turns himself in in this district, we will represent him for 
that actions have the initial proceedings,” French said Friday morning. "I haven't had any direct 
consequences, and contact with him yet." 

this is something 


that L was always In a telephone interview Thursday, Lamo said he was in California, but did 

. not plan to turn himself in until after conferring with the attorney. The hacker 
aware might was quick-witted and seemingly in good humor, with only a trace of 
happen.’ 


nervousness in his voice. He quipped about the proper etiquette of being 
-- Adrian Lamo arrested by the FBI, and suggested jokingly that SecurityFocus should 
purchase the publication rights to a favorite photo. He said he was in the 
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company of a camera crew producing a television documentary on hackers. 


“T have always said that actions have consequences, and this is something that I was always aware might 
happen," said Lamo. “I don't intend to deny anything that I have done, but I do intend to defend myself 
vigorously.” 


The 22-year-old Lamo has become famous for publicly exposing gaping security holes at large 
corporations, then voluntarily helping the companies fix the vulnerabilities he exploited -- sometimes 
visiting their offices or signing non-disclosure agreements in the process. 


Until now, his cooperation and transparency have kept him from being prosecuted. Lamo’s hacked 
Excite@Home, Yahoo, Blogger, and other companies, usually using nothing more than an ordinary Web 
browser. Some companies have even professed gratitude for his efforts: In December, 2001, Lamo was 
praised by communications giant WorldCom after he discovered, then helped close, security holes in their 
intranet that threatened to expose the private networks of Bank of America, CitiCorp, JP Morgan, and 
others. 


Lamo believes the arrest warrant is for his most high-profile hack. Early last year he penetrated the New 
York Times, after a two-minute scan turned up seven misconfigured proxy servers acting as doorways 
between the public Internet and the Times private intranet, making the latter accessible to anyone 
capable of properly configuring their Web browser. 


RELATED STORIES 
« Panel Debates Hacker 


Once inside, Lamo exploited weaknesses in the Times password 


Amnesty policies to broaden his access, eventually browsing such disparate 
e New York Times internal information as the names and Social Security numbers of the paper's 
Network Hacked employees, logs of home delivery customers' stop and start orders, 


Who Is Adrian Lamo? instructions and computer dia!-ups for stringers to file stories, lists of 
» Yahoo! News Hacked 


» Proxy Exposes contacts used by the Metro and Business desks, and the "WireWatch' 


Excite@Home Data keywords particular reporters had selected for monitoring wire 
services. 


He also accessed a database of 3,000 contributors to the Times op-ed page, containing such information 
as the social security numbers for former U.N. weapons inspector Richard Butler, Democratic operative 
James Carville, ex-NSA chief Bobby Inman, Nannygate veteran Zoe Baird, former secretary of state 
James Baker, Internet policy thinker Larry Lessig, and thespian activist Robert Redford. Entries with home 
telephone numbers include Lawrence Walsh, William F. Buckley Jr., Jeanne Kirkpatrick, Rush Limbaugh, 
Vint Cerf, Warren Beatty and former president Jimmy Carter. 


In February, 2002, Lamo told the Times of their vulnerability through a SecurityFocus reporter. But this 
time, no one was grateful, and by May federal prosecutors in New York had begun an investigation. 


“I think this is unsporting of the New York Times," Lamo said Thursday. 
Lamo's mother said she has no opinion on her son's exploits. She's just worried about him. 


"I don't really know much of anything about computers," says Mary Lamo. "He’s my son. Right now, all I 
can worry about is how I can help him." 


"I hope there will be a time when Adrian can do positive things that everyone agrees are positive," she 
adds. 
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Ex Oblivione 
by H. P. Lovecraft 
Written 1920 
Published March 1921 in The United Amateur, Vol. 20, No. 4, p. 59-60. 
When the last days were upon me, and the ugly trifles of existence began to drive me to madness like 
the small drops of water that torturers let fall ceaselessly upon one spot of their victims body, I loved 
the irradiate refuge of sleep. In my dreams | found a little of the beauty I had vainly sought in life, and 


wandered through old gardens and enchanted woods. 


Once when the wind was soft and scented [ heard the south calling, and sailed endlessly and 
languorously under strange stars. 


Once when the gentle rain fell 1 glided in a barge down a sunless stream under the earth till I reached 
another world of purple twilight, iridescent arbours, and undying roses. 


And once I walked through a golden valley that led to shadowy groves and ruins, and ended in a 
mighty wall green with antique vines, and pierced by a little gate of bronze. 


Many times I walked through that valley, and longer and longer would I pause in the spectral half- 
light where the giant trees squirmed and twisted grotesquely, and the grey ground stretched damply 
from trunk to trunk, some times disclosing the mould-stained stones of buried temples. And alway the 
goal of my fancies was the mighty vinc-grown wall with the little gate of bronze therein. 


After a while, as the days of waking became less and less bearable from their greyness and sameness, 
I would often drift in opiate peace through the valley and the shadowy groves, and wonder how I 
might seize them for my eternal dwelling-place, so that I need no more crawl back to a dull world 
stript of interest and new colours. And as I looked upon the little gate in the mighty wall, I felt that 
beyond it lay a dream-country from which, once it was entered, there would be no retum. 


So each night in sleep | strove to find the hidden latch of the gate in the ivied antique wall, though it 
was exceedingly well hidden. And I would tell myself that the realm beyond the wall was not more 
lasting merely, but more lovely and radiant as well. 


Then one night in the dream-city of Zakarion I found a yellowed papyrus filled with the thoughts of 
dream-sages who dwelt of old in that city, and who were too wise ever to be born in the waking 
world. Therein were written many things concerning the world of dream, and among them was lore of 
a golden valley and a sacred grove with temples, and a high wall pierced by a little bronze gate. When 
I saw this lore, I knew that it touched on the scenes I had haunted, and I therefore read long in the 
yellowed papyrus. 


Some of the dream-sages wrote gorgeously of the wonders beyond the irrepassable gate, but others 
told of horror and disappointment. I knew not which to believe, yet longed more and more to cross 
for ever into the unknown land; for doubt and secrecy are the lure of lures, and no new horror can be 
more terrible than the daily torture of the commonplace. So when I learned of the drug which would 
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unlock the gate and drive me through, I resolved to take ft when'next I awaked. 


Last night I swallowed the drug and floated dreamily into the golden valley and the shadowy groves; 
and when | came this time to the antique wail, I saw that the small gate of bronze was ajar. From 
beyond came a glow that weirdly lit the giant twisted trees and the tops of the buried temples, and | 
drifted on songfully, expectant of the glories of the land from whence I should never return. 


But as the gate swung wider and the sorcery of the drug and the dream pushed me through, | knew 
that all sights and glories were at an end; for in that new realm was neither land nor sea, but only the 
white void of unpeopled and illimitable space. So, happier than I had ever dared hope to be, I 
dissolved again into that native infinity of crystal oblivion from which the daemon Life had called me 
for one brief and desolate hour. 
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FBI reportedly hunting Adrian Lamo 
By Kevin Poulsen, SecurityFocus 
Posted: 05/09/2003 at 07:28 GMT 


FBI agents armed with a federal arrest warrant out of New York 
were searching for Adrian Lamo Thursday, according to the 
hacker and his mother. 


Two agents visited the home of Lamo's parents, Mario and Mary 
Lamo, near Sacramento, California, Thursday afternoon, says 
Mary Lamo. "They wouldn't tell us anything but that they had an 
arrest warrant and they wanted to come in," she adds. 


When she demurred, the agents vowed to return with a search 
warrant, and have been overtly watching the house from parked 
cars ever since, she says. “They followed me when I went out, so 
they're not hiding it." 


Bureau spokespersons could not be reached after hours 
Thursday. 


Lamo frequently stays at his parents’ home, but he was not there 
at the time of the FBI's visit, and has not returned since. His 
mother contacted the Federal Public Defender's office in 
Sacramento, which has agreed to handle his surrender, she says. 
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In a telephone interview, Lamo said he was in California, but does CA 


not plan to turn himself in until after conferring with the attorney. 
The hacker was quick-witted and seemingly in good humor, with 
only a trace of nervousness in his voice. He quipped about the 
proper etiquette of being arrested by the FBI, and suggested 
jokingly that SecurityFocus should purchase the publication rights 
to a favorite photo. He said he was in the company of a camera 
crew producing a television documentary on hackers. 


“| have always said that actions have consequences, and this is 
something that | was always aware might happen,” said Lamo. "I 
don't intend to deny anything that | have done, but | do intend to 
defend myself vigorously." 
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The Mac Channel . . . 

Channel Flannel The 22-year-old Lamo has become famous for publicly exposing 
gaping security holes at large corporations, then voluntarily 
helping the companies fix the vulnerabilities he exploited -- 


Small Business 


BOFH ¥ an ee aan . 
sometimes visiting their offices or signing non-disclosure 
Letters agreements in the process. 
Site News 
Contact us Until now, his cooperation and transparency have kept him fram 


“The Reg Newsletter being prosecuted. Lamo's hacked Excite@Home, Yahoo, 
Enter your email address Blogger, and other companies, usually using nothing more than 
here for our dailynews an ordinary Web browser. Some companies have even professed 


update. gratitude for his efforts: In December, 2001, Lamo was praised by 
communications giant WorldCom after he discovered, then 
Subscribe helped close, security holes in their intranet that threatened to 
Privacy Policy expose the private networks of Bank of America, CitiCorp, JP 
Morgan, and others. 
Get the Reg Lamo believes the arrest warrant is for his most high-profile hack. 
Screensaver. Early last year he penetrated the New York Times, after a two- 
Join the Reg SETI minute scan turned up seven misconfigured proxy servers acting 
group. as doorways between the public Internet and the Times private 
Join Reg intranet, making the latter accessible to anyone capable of 


Cancerbusters. | properly configuring their Web browser. 


Once inside, Lamo exploited weaknesses in the Times password 
policies to broaden his access, eventually browsing such 
disparate information as the names and Social Security numbers 
of the paper's employees, logs of home delivery customers’ stop 
and start orders, instructions and computer dial-ups for stringers 
to file stories, lists of contacts used by the Metro and Business 
desks, and the "WireWatch" keywords particular reporters had 
selected for monitoring wire services. 


He also accessed a database of 3,000 contributors to the Times 
op-ed page, containing such information as the social security 
numbers for former U.N. weapons inspector Richard Butler, 
Democratic operative James Carville, ex-NSA chief Bobby Inman, 
Nannygate veteran Zoe Baird, former secretary of state James 
Baker, Internet policy thinker Larry Lessig, and thespian activist 
Robert Redford. Entries with home telephone numbers include 
Lawrence Walsh, William F. Buckley Jr., Jeanne Kirkpatrick, 
Rush Limbaugh, Vint Cerf, Warren Beatty and former president 
Jimmy Carter. 


n February, 2002, Lamo told the Times of their vulnerability 
hrough a SecurityFocus reporter. But this time, no one was 
grateful, and by May federal prosecutors in New York had begun 
an investigation. 
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"| think this is unsporting of the New York Times," Lamo said 
Thursday. 


Lamo's mother said she has no opinion on her son's exploits. 
She's just worried about him. 


“| don't really know much of anything about computers,” says 
Mary Lamo. "He's my son. Right now, all | can worry about is how 
l can help him.“ 


“| hope there will be a time when Adrian can do positive things 
that everyone agrees are positive,” she adds. 
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So-called homeless hacker Adrian Lamo at H2K2 convention (r), with Steven Levy of 
Newsweek 
photographed on 2002.07 
in New York City, NY 
Canon EOS D30 camera 
size is 107 KB 
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So-called homeless hacker Adrian Lamo at H2K2 convention 
photographed on 2002.07 
in New York City, NY 
Canon EOS D30 camera 
size is 112 KB 
volume d30-23 
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So-called homeless hacker Adrian Lamo at H2K2 convention 
photographed on 2002.07 
in New York City, NY 
Canon EOS D30 camera 
size is 68 KB 
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“y He said ne intends to turn nimselr in atter ne ¢eviews the charges. Altnougn 

3 the FBI isn’t saying what the charges are, Lamo said he thinks he'll be 
allowed to know the charges before he turns himself in. He expects the 
charges to be reasonable and he said he'll defend himself rigorously. 


“This will not be a slam-dunk prosecution,” Lamo said. “[But] l'm worried. | 
don’t know what's going to happen." 


Lamo said he didn't know if he would be arrested immediately after he got off 
the phone. 


"It's a shame it had to come to this,” he said. “I intend to show that this sort of 
thing can't be seen as a deterrent. I've done things that people see as illegal 
and probably are illegal, but { don't think I've done anything wrong.” 


"| don't think things happen by accident. | don’t think that I've done anything 
wrong. | don't think the F8] is doing anything wrong,“ he said 


Lamo said he was going to a safe place to review his legal options after he 
had talked with us, although his lawyer has advised him to turn himself in as 
soon as humanly possible. Lamo also said he intends to answer for his 
actions. 


{f the FBI refuses to show him the charges, he'll continue to negotiate as a 
reasonable person, he said. 


"| appreciate ail the support that !'ve gotten,” he said. "Having been there, | 
would not change anything that I've done.... | hope the people out there 
considering their own courses in life will not let the people who want to 
criminalize curiosity let them stop what they want to do.” 


Posted September 5, 2003 
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“y He said ne intends fo turn nimselt in alter ne seviews the charges. Aitnougn 
the FBI isn't saying what the charges are, Lamo said he thinks he'll be 
allowed to know the charges before he turns himself in. He expects the 
charges to be reasonable and he said he'll defend himself rigorously. 


“This will not be a slam-dunk prosecution,” Lamo said. “[But] I'm worried. | 
don't know what's going te happen.” 


Lamo said he didn't know if he would be arrested immediately after he got off 
the phone 


“It's a shame it had to come to this.” he said. “I intend to show that this sort of 
thing can’t be seen as a deterrent. I've done things that people see as illegal 
and probably are illegal, but | don’t think I've done anything wrong." 


“I don't think things happen by accident. | don't think that I've done anything H 
wrong. | don't think the FBI is doing anything wrong." he said. 


Lamo said he was going to a safe place to review his legal options after he 
had talked with us, although his lawyer has advised him to turn himself in as 
soon as humanly possible. Lamo also said he intends to answer for his 
actions. 


If the FBi refuses to show him the charges, he'll continue to negotiate as a 
reasonable person, he said. 


“| appreciate all the support that I've gotten,” he said. “Having been there, | 
would not change anything that I’ve done.... | hope the people out there 
considering their own courses in life will not fet the people who want to 
criminalize curiosity let them stop what they want to do." 
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EnviroVideo 
Media Designed to Empower People 


Featuring Vital Environmental Information and 
Subjects 


"These are great videos, Envision Environmental Media Center 
totally essential to the fight 

to save the planet. These EnviroVideo is a project of Envision Environmental 
are must-see items for you Media Center (EEMC). EEMC is a Not-For-Profit 


and your kids.” - Harvey Corporation with 50l(c)(3) tax-deductible status. EEMC 
Wasserman, Senior has the chartered purpose of educating the public about 
Advisor, Greenpeace environmental issues -- to increase awareness and understanding of 
International environmental matters -- by producing and distributing video 
programs. 


Established in 1991, EnviroVideo has produced, through EEMC, 
more than 200 environmental TV programs and award-winning 
documentaries. 


EnviroVideo produces environmental and social justice programs 
for television - including interview and news shows, specials, and 
documentaries. Enviro Video distributes its programs through cable, 
commercial and public television, satellite and direct sales. Contact 
EnviroVideo at: cnvirovideo@ carthlink net 


EnviroVideo Principals: 


Steve Jambeck 

President 

Director & Co-Producer, Enviro-CloseUp 

Emmy Award-winner and 25-year veteran of network TV. Recipient 
of the Monitor Award and seven film festival awards. 


Karl Grossman 
kgrossman hamptons.com, 
Vice President & Program Director 
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| ve | Host of Envire-CloséUp 


An investigative journalist who specializes in the environment, a 
long-time TV newsperson, news anchor, and full professor of 
journalism at the State University of New York/Coliege at Old 
Westbury. He is an associate of the media watch group FAIR. 


Video documentaries he has written and hosted for EnviroVideo 
include Nukes in Space: The Nuclearization and Weuponization of 
the Heavens, Nukes In Space 2: Unucceptable Risks, Three Mile 
island Revisited and The Push To Revive Nuclear Power, all of 
which have received video festival awards. His latest video 
documentary, Star Wars Returns, is available from EnviroVideo. 


His books include The Wrong Snuff? The Space Program's Nuclear 
Threat To Our Planet, Cover Up: What You Are Not Supposed To 
Know About Nuclear Power, Power Crazy, The Poison Conspiracy 
and Nicaragua: America's New Vietnam? His new book, Weapons 
/n Space, is available from Seven Stories Press 

(https www. info@ sevenstories.com or 212-226-8760). 


Journalism by Grossman on the nuclearization and weaponization of 
space have been included six times on Project Censored's annual 
lists of the ten most “under-reported," “best-censored” stories. 
Grossman is the recipient of the George Polk, James Aronson and 
John Peter Zenger Awards. 


Mr. Grossman alerts readers to the dangers inherent in the recently 
revived space nuclear power scheme as illustrated by the Columbia 
disaster in the article "Nuclear Space Story". 


A recent article Nuclear Renaissance or Nuclear Nightmare? 
(October 23, 2002) about the Bush administration breathing new life 
into commercial nukes is availble on the Corpwaich web site. 


Last year Mr. Grossman gave a keynote address, Parallel Atomic 
Universes, at the Exchange of the Intiative for Social Action and 
Renewal in Eurasia, Tomsk, Siberia (May 24, 2002). He also spoke 
about Nuclear Engineering. [thies and Public Health at the 5th 
international Conference on Problems and Practice of Engineering 
Education, Tomsk, Siberia (May 26, 2002). 


Green Sphere 


Green Sphere, Inc. was incorporated in 1988 with the help of 
Columbia University's Law Clinic. The organization's main 
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objective is to educate and-inspiré the general public to act more 
socially responsible in protecting the environment. As noted ina 
letter by Vice President Al Gore: Green Sphere's interactive Town 
Meeting's involved citizens in the debates during the U.N.’s Earth 
Summit process, which had a direct impact on the Bush -1 
administration's influence on doing further damage to the Summit. 
Through interactive use of the media Green Sphere is helping to 
give a voice to the other global super power: world opinion. Green 
Sphere is dedicated to helping create a true democracy in the world. 
Also, Green Sphere is involved in on-going grass roots work with 
indegenous people in Brazil. Such as the installation of two water 
pumps in an Amazon Indegenous village in Brazil. 

Additional initatiatives include creating the "Paiakan Legal Defence 
Fund" in association with the the Rainforest Action Network, and 
the installation of a solar powered ham radio in a new traditional 
native Amazon village. 


Green Sphere has managed to transcend color/ethnicity, class, age 
and gender - and build a network of committed environmentalists, 
cultural workers and mass media activists. 


Frank Melli 

Executive Director & Co-Founder, Green Sphere 

Senior TV broadcast engineer in New York since 1982. Award- 
winning producer for his work with EnviroVideo: “Three Mile 
Island Revisited" and "Nukes In Space;" for his work with homeless 
children: “It's not Easy," and "Women Speak Out," and "One Child 
One Voice" - Barbara Pyle Productions. 


Links to other related web sites. 


If you have suggestions, contributions, or would like to lend your 
talent to improve this web site, please contact the webmaster. 


Thanks. 
Home | About Enviro ideo | Enyiro Close-Up | Documentaries | Special Features | Index of 
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ER Sans 


Hacker Or Security Crusader? 


What Drives One Homeless Person to Break Into Comptuer Networks 


SHOPPING 
o 


WIRELESS By David Stevenson, Tech Live 

3) techiv 
INTERACT March 11 — You can spot Adrian Lamo in your neighborhood Kinko's copy 
VIDEO DIO shop. He's the young man with the battered Toshiba laptop, intently searching 


for holes in the Web. 


BOARDS 
CHAT 

NEWS ALERTS 
CONTACT ABC 


Lamo says he’s homeless, “couch surfing” with friends 
while he works as a freelance security consultant. The 21- 
year-old says he's helping corporations and consumers 


ALSOON 


* Hacker? Or Security understand the limits of Internet security. But his methods 

Crusader? are alarming media giants. 

* Mind-Bogating In the fast two years, Lamo has penetrated the intranets 

Minicams and archives of America Online, Yahoo!, Excite@Home, 
WorldCom, and, most recently, The New York Times — 

* Should Humans Get where he accessed and added his name fo an internal list 

Chipped? of op-ed contributors. 


* Mac Addicts’ Find Home . ae fe 
Driven by Curiosity, Not Criminat Intent 


on Net 
* Spray Could Protect Lamo says he's not worried about the legality of what he’s 
Buildings From Bombs doing. 


“| know that prosecution can happen but | try not to let my 


¥IneO HIGHLIGHTS Gzzz actions be guided by fear," he said. 


@ VIDEO Instead, Lamo claims to be guided by a sense of curiosity 
that prods him to explore the fimits of online security. He 

* Computers Get Touchy- doesn't try to charge companies to help them fix the holes 

Feely he finds, a fact that may have discouraged prosecution by 
Yahoo!, Excite@Home, and WorldCom. 


Still, some network security experts say he's little more than a publicity-seeking 
criminal. Frederick Felman, vice president of marketing at Zone Labs, a security- 
software maker, shares that opinion. 


“fhe... goes through the data; if he finds some piece of paper or some electronic 
document and looks at it, | think it is, in fact, a crime," Felman said. 


A Helpful Intruder? 


The New VYark Timas may he inclined tn anrae A ranresantative told TarhTV/ the 
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Sueuigetwns es 


PieGeues asec ae Seek 2 ste 
in determining how it will handle what it considers a 


company is “exploring all option: 
security breach. 


Even Lamo admits he's breaking federal computer crime laws. 


“Im accessing their network without authorization. So | am an intruder. From there on, 
it's pretty subjective," Lamo said. 


But his ultimate aim is to help, Lamo said. He said he plans to keep using the tools 
available to him to test the limits of technology. 


Copyright 2002 TechTV, inc. All rights reserved. This material may not be published, 
broadcast, rewritten or redistributed. 
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AMT LICK, © 


HACKE 


Adrian Lamo , hacker without home, more famous of the world to duer to me generaily in a 
building in construction near Horseradish tree Franklin in Philadelphia and when it wakes up goes 
to a public computer with connection of the Internet, with the objective of "hurgar" between the 
servants of Internet. Nevertheless laptop Toshiba takes always with himself one and a cellular 
one, in case of not finding a site available. 


1 lick works temporarily like consultant (freelance) of security, to order of corporations. 


The past January of the 2002 found a flight in the hermetic network of the Excite@Home 
corporation . This young person of 21 years shows that she is helping to the companies and the 
users to understand the limits of the security in Internet, although their methods alarm the 
giants of means. 


For 2 years, | have been licking was done well-known in the circles of 
hackers to the salary entered in the networks of America on Line , 
BYahoo and Worldcom , informing to its administrators the form how it 
did it. The own administrators have called it shining and "beneficial" to 
discover these hollows in their networks. The critical describe to I lick 
like a prattler that it wants to call the attention. “He is somebody 
impressed with the abilities of I lick? He is not doing anything that 
surprises particularly. He has not either discovered a new concept of the 
security. He is looking for the basic hollows “wrote a member of the 
forum of SecurityFocus . 


Adrian Lamo, that appears photographed in the first place of the left, next to ex--convictos 
hackers Kevin Mitnick and Kevin Poulsen , says that its motivation is the curiosity and not to 
make criminal acts ; "I recognize that 1 can be accused legally but I do not allow that my actions 
are lead by the fear". Of being judged it could be condemned 5 years of prison. 


The prison would be an ironic change for I lick, since it would be the first time in years that a 
fixed place wouid have to remain. Sleeping outside, in a mattress, entering Internet in the 
libraries of the university or any other public place, to vagar by the coasts of the country in train 
or bus of Greyhound, they constitute its style of life. 


“I have a portable computer in Pittsburg, I change to me of ciothes in Washington D.C., to give 
an idea of my juridiscionabilidad". It happens most of its nights in the sofas of the friends. But 
when the hospitality becomes difficult, blanket in the buildings in construction of the city. 


T lick said to have found its way to live inspired by the complex one was cojonial military man, 
trying to avoid to touch the doors constantly. “It is a quite good metaphor, my motivation by 
which I am an intruder in Internet". 


“the networks of the company use powerful Proxy systems, so that their employees are of 
incursions or attacks through Internet free. It is a unidirectional door, essentially. But if the Proxy 
servants do not form themselves correctly, these doors can be opened in both directions, 
allowing of the intruders to cross these corporative securities ", said Chris Wyspoal , an 
executive of the company/signature of Security @Stake . 


I lick found a vulnerability in the network of the newspaper The New York Times in less than 
two minutes. “It is so simple although many consider a black belt of the martial arts of the 
computers". In spite of its good intentions, I lick could go to the jail reason why it is doing. The 
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peculiar thing of the case is that until now anybody it has accused it formally. 


"In strict sense, he is a criminal, since the law does not consider the motivation” shows the 
consultant of security Winn Schaw. I lick has answered "if the government decided to process to 
me, something would be in front". 


1 lick insists that unlike many, it does not take the money from the companies to which has burst 
in into its security. "When it was thirsty during the incursion in Excite@Home , they bought 
water a gaseous bottle to me of 50 cents" counted I lick, “is the maximum that f obtained". 


Its place, it trusts the savings that kept from the temporary works that made for the famous 
company of clothes Levi Strauss and for some organizations without profit aims. Also it receives 
aid of its parents Maria Lamo and Mary Atwood. 


During her childhood and years of formation her family changed itself frequently to Arlington, 
Virginia, Bogota, Colombia, birthplace of her father and finally to San Francisco. When they 
decided to be transferred to Sacrament, Adrian Lamo that counted on 17 years chose to remain 
in the city and to live by its account. 


In spite of the pressures of an adult, the friends say that I lick continue being of some way, a 
boy. I lick is "a strange amalgam of Robin Hood and the cattle tender of the console“ wrote 
Whiters-Ridley in a forum of the news. “he is samurai that vague, like a luck of airborne 
magnetic detection Max , with a heart of gold." 


I lick recently created a group of the news (USENET). "If it did not have computers, it would be 
exploring you drain of the storm or the caves of the mountain. When I do not have a line to the 
network, there have been times that my portable computer has been the unique one that posei 


But their adventures through the vulnerabilities of the technological companies could finish soon. 
The outcry is coming from an increasing critica! choir and I lick has a feeling that a federal 
investigation would be about to to arrive. "I have had a long day, a long month, and a very long 
year," showed Adrian Lamo in char it with intimate friends. 


I lick concludes: " dream with a hot and safe place “. 


el 
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Adrian Lamo, age twenty-one, is widely considered the most effective 
and prolific hacker working today. His conquests include Microsoft, 
NBC, and the New York Times. We woke Lamo up—at 1:30 in the 
afternoon—for some insight into what makes him tick. 


New Architect: Hey, are you up yet? 
Adrian Lamo: Yeah—in process of waking up and breakfasting. 
NA: Funny, it's past lunchtime here in SF. 


AL: You're too linear. 


NA: Where are you? 


AL: About two hours south of San Francisco, with some friends. 


NA: Most people think the stereotypical hacker lives alone in a 
windowless room. 


AL: Most of the rooms I sleep in have windows. I've had a few that 
didn't. Tossed tinfoil over the windows at the apartment I split in 
Richmond, Virginia for a few months. 


NA: Tinfoil? 


AL: Most neiahborhoods. tinfoil on the windows aets vou left alone. 
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There, a neighbor showed up like a da later to ask whether we were 
growing pot. Can‘t win. 


NA: Do you think hacking is seen as more criminal than growing 
pot? 


AL: Depends massively on the location. You're very much subject to 
the foibles of local law enforcement, who range from ex-marine types 
who got turned down by the FBI, to the state police who like to take it 
out on minor offenders, to people who just have the job because it's 
easy, has good benefits, and enjoy a Jack Daniels and Xanax before 
bed. It's very subjective. 


NA: It also depends on the “type” of hacker, right? You're white 
hat? 


AL: Well, despite the frequent use of "white hat" to describe me, I've 
never identified myself as such, or claimed a specific label for what I 
do. I do what I do and encourage people to draw their own 
conclusions. 


NA: So what kind of gear do you use? 


AL: There’s a bit of incidental stuff, but the center of most of the 
compromises has been my laptop, a Toshiba Portege 3480CE, and my 
Web browser, usually out-of-the-box Internet Explorer. Almost 
everything is Web based; I could do it from any workstation on any 
operating system, pretty much. 


NA: Back in the day, most hacker tools were nasty DOS kluges. 
Things appear to have progressed a long way in the last few 
years. 


AL: Conceptually, it's the same: You're dealing with the same basic 
sort of technology structures, People make the same sorts of mistakes. 
You think in the same ways of doing research, It's just the faces that 
change. With occasional exceptions, there are patterns to how things 
are arrayed—people or machines—no matter haw complex they get. 
Sometimes they're so subtle that you don't even really know what they 
are, you just move with them intuitively. The primary difference, to 
me, has been a change in people's awareness of how accessible much 
of it is. 


NA: Are you saying people are now more aware of security risks 
or less? 


AL: To most people, no matter how much exposure they get to the 
idea of computer security, it will still always be an opaque concept. 
They don't get that posting their resume and mentioning the URL of an 
intranet site they designed for Lockheed a year ago could iead 
indirectly to massive compromise, no matter how aware they are of the 
bugs that afflict their Outlook install. 
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NA: What's the root cause of this mentality? And is there 
anything that.can be done? 


AL: A scenario where all networks are perfectly secure might be 
desirable for someone with a long-term vested interest in security, 
but—thankfully—that's not possible, and perhaps not even desirable. 
For many companies, it is harmful when intrusions happen, but it 
doesn't have to be. There's a stigma attached to them, and a sense 
that the companies are somehow lessened by having been targets of 
successful hacks. No company can be 100 percent secure, and the 
people securing them have tended to come from backgrounds that 
reflect zero-tolerance and linear, law-and-order approaches to security. 
It's easy to look at something that harms a company and say it's bad, 
but that denies the context—that without many of the spurious, 
sometimes seemingly meaningless events that have taken place during 
the history of the Net and of society, we wouldn't be at quite the place 
where we are now. 


People with a physical and national security background are trying to 
apply their life lessons to a situation outside that context, and they'll 
continue to do so for as long as they can. Everyone does what they feel 
they should do. 


NA: Okay, so where do you fit in? 


AL: I do what I do. I try to do it in ways that I'd generally be okay with 
if they were applied to me, and things work out one way or another. 
There's no quest that will be finished once I accomplish "X.”" I do what 
I'm geared to do, for lack of a better way of describing it. 


NA: Fair enough. I want to ask about some of your hacks, and 
we'll leave the "why" to the muses. How do you pick your 
targets? 


AL: They're there, and I'm there. It meshes with the above. If I really 
went out and looked for a specific target, I'd be going against the 
current of how this happens in the first place. It's random and 
unknowable. 


NA: Any thoughts on your favorite hacks? Easiest? Most 
i difficult? Best? 


| AL: Well, in keeping with how they happen, the more improbably it 

1 happens, the more of a kick I get out of it. With the New York Times, I 
couldn't even piece together every link in the chain of events, but when 
the intranet page loaded, my friend sitting next to me was just 
floored—not because it was the Times, but because of how randomly it 
had happened: Sitting there, chatting, me just randomly following a 
chain of sites on a random tangent. Read an article on one, push the 
security envelope on another, follow up on something I saw mentioned 
during the course of that, and research it on a different one, eventually 
end up with an interest in who had written something specific, and fire 
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off an email to an autoresponder to get their middle initial to see if it 
was the right person, and see a specific IP address in the headers of 
the autoresponse from the New York Times that led to finding another 
subnet that I scanned on a whim...that glosses over a lot of it, but 
when things unfold like that, it's really the best for me. Sure, you can 
protect yourself against $5,000 commercial scanning software, but 
can't nothing protect you against unlikely coincidence. Chance undoes 
the best of our plans; it's important that we keep a sense of absurdity 
about it. 


NA: And you reported the hole to the Times? 


AL: I browsed, and promptly forgot about it. It just wasn't that 
interesting. They're a newspaper. Big deal. Eventually I made a call to 
SecurityFocus to see when they thought would be best to do the 
disclosure. 


NA: What was the reaction from the Times? 


AL: The Times has had no official reaction other than to convey how 

seriously they take security, and that they're still evaluating afl their 
options. it'd be nice if they'd contacted me. {Editor's Note: Since our 
interview, an FBI investigation appears to have been initiated] 


NA: Have you ever been prosecuted for any of your hacks? 


AL: I've not been prosecuted. Probably my closest brush with the law 
has been any of my several random police stops—I'm frequently in 
random places at night, on a dark road in middle of nowhere, walking 
on the shoulder, whatever. That's the onfy context in which I've had 
any cop/detainee interactions that were in any way serious. 


NA: Does prosecution concern you? 


AL: I am, of course, aware of the possibility of prosecution, It’s not a 
distant, theoretical awareness either—I think about it when I hear cars 
outside fate at night, and I don't make any sudden moves when a 
white Crown Victoria pulls up near me when I'm walking. But we all 
take risks in life, The important thing is to not stop living my life 
because of what might or might not happen. 


NA: Random places at night? Dark roads in the middle of 
nowhere? Explain. 


AL: I just end up in strange places. Like when I got stranded in Ohio 
because of a string of random luck, I didn't think it was unreasonable 


to walk about twenty miles to Dayton, but the local cop that got a call 
from a concerned farmer did. 


NA: How do you fund your travels? 
AL: Walking is free, and Greyhound from coast to coast is something 
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around $110. Occasional security/network work tunds my interests the 
rest of the time: 


NA: I assume your security/network contracts know about your 
after-hours activities? 


AL: I mention it to the occasional ones that don't know, but more out 
of courtesy than out of thinking it's somehow crucial that they know. 


NA: Ever any hesitation from clients? 


AL: Not that I recall. I don't usually solicit clients; it's generally the 
other way around. The work isn’t a priority; I can do a month on about 
$150 if I want to. If my laptop died after an improbable plunge into 
some underground river or something, I might make a couple cails. 


NA: Let me ask about specific vulnerabilities in systems these 
days. Any common holes? 


AL: That ties back to what I've said before in a lot of ways—it's less 
specific things that usually need patching. But for the sake of some 
slightly more specific notes, it’s frequently conceptual vs. system- 
centric vulnerabilities. Your unreasonably expensive firewall that blocks 
ubiquitous scanning tools doesn't matter if I learn everything I need to 
know about your network with a ten-minute Google search. 
Authenticating by social security number and date of birth doesn't 
matter if I can get both with a fax from the public records department 
at the courthouse. Requiring logins to come from on-campus and 
blocking all outside connectivity is cool, but it won't matter if I can walk 
inte the HR reception area and use one of the computers on your 
internal LAN that you thoughtfully provide to browse job listings. 


NA: Any words of advice for companies on the other end of a 
connection from you... or, worse, from a malicious hacker? 


AL: Yeah. Operate in a world where your business model depends on 
honesty, full disclosure, and the realistic portrayal of your product and 
company on their own merits, rather than one where the incidental 
glimpse behind the scenes is traumatizing to the corporation as a 
whole. More realistically, setting a precedent for less damaging 
intrusion isn’t unreasonable. If your company accepts that it won't ever 
be 100 percent secure, accepting good-faith conduct and full disclosure 
from intruders that come forward—and holding them to it—may 
prevent a more serious intrusion in the future, in ways that playing up 
an “Unbreakable” front won't. 


More practically, segment your operations. If I compromise a secretary 
in graphic design, there's no need for him to be able to access HR. 
records. You'll probably be surprised by how much room there is for 
improvement. But at the same time, don't cut people down into 
specialized worker bees that will go out of their way to get more access 
in the face of massive restrictions. 
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‘Homeless hacker’ may surrender to 


FBI 


By Declan McCullagh 
Staff Writer, CNET News.com 


September 5, 2003, 4:00 PM PT 


Adrian Lamo, the so-called homeless hacker who claims 
responsibility for a series of high-profile electronic intrusions over 
the last two years, is negotiating with the FBI to surrender over 


criminal charges. 


Latest Hez 


display on deskto 
RIM Soosts autor 


ell calls for biag 
standards 


Oracie lakes tig a 


Microsoft opens & 
site 


Security firny: IE y 
work 


Scientology ioss | 
hyperlinks legal 


Comcast. Faster 


Lamo, 22, said his attorney is talking with the U.S. Attorney's office in New York City over year's eng 


unspecified allegations of criminal misconduct. On Thursday, FBI agents showed up at his 
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parents' home in Sacramento, Calif., Lamo said in a telephone interview Friday evening, Net 


during which he would not disclose his location. 
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“(The FBI agents) went to my parents’ house to try to find me there," Lamo said. "Since then, —_ [gna sharpens bla 


I've been told they're looking for me. But I've had no direct contact with them." 


Mary French, a deputy public defender in Sacramento who is representing Lamo, provided a 
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statement that said: "We have confirmed that there is a sealed complaint fram the Southern oe 
District of New York and a federal arrest warrant for (Lamo)." eyessen nabs wit 
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Lamo, whose brazen exploits, media savvy and rootless lifestyle have made him something iPod 


of a legend in hacker circles, indicated that he's willing to give himself up after he learns what 
the charges against him are. "| wanted to know more about the counts against me, before | 
agreed to surrender to face them,” he said 
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On Aug. 22, Lamo contacted CNET News.com to say he believed a federal criminal Australia case 
investigation of his intrusions into The New York Times’ computers had been accelerated. AOL Europe now 
But he was unabie to confirm the situation until the FBI agents showed up on Thursday, he for US 
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“We have been cooperating with the authorities in their investigation of the security breach Retail lakes stock 


that happened in February 2002,” Christine Mohan, a spokeswoman for The New York Times 
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Co., said on Friday. “We've cooperated with them since that breach, and we're continuing to 


do so.” 
News Tool 
Mohan would not provide details of the cooperation. She would not say whether the company 
had filed a criminal complaint against Lama after the intrusion took place. Get news by 
mihis| What 


In that incident, which New York Times Digital confirmed at the time, Lamo was able to view 
employee records, including Social Security numbers. He was also able to access the 
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contributors as former U.S. President Jimmy Carter, former Marine Col. Oliver North and hip- 
hop artist Queen Latifah. 


Lamo also claims to be responsibie for intrusions into systems at MGI WorldCom in 
December 2001, Microsoft in October 2001, Yahoo in September 2001, and Excite@Home in 
May 2001. When he entered Yahoo's system, Lamo found he was able to after news articles 
on the company's site. 


Many, if not all, of these intrusions appear to violate the federal Computer Fraud and Abuse 
Act, which calls for punishment of anyone who “intentionally accesses a computer without 
authorization or exceeds authorized access" with fines and between one and five years in 
prison, depending on the charges. 


The U.S. Attorney's office in New York City did not immediately respond to a request for 
comment. 


In addition to these intrusions, Lamo is known for his homeless-hacker lifestyle. He has no 
fixed address, and instead wanders around the United States on Greyhound buses, sleeping 
on friends' couches and, when necessary, staying in vacant or derelict buildings. Especially 
now that he knows the FBI is after him, Lamo said: "I'm in constant motion. Like Saddam 
Hussein, no two nights in one place." 
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(b)(6)V/(Y7)C)-3 
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FBI(19-cv-1495)-1294 


ua 


(b)(6)/(bY(7)(C)-3, 


FBI(19-cv-1495)-1295 


(b)(6V/(Y(7)C)-3 


FBI(19-cv-1495)-1296 


(b)(6)/(b)(7)(C)-3; (b)(7)(E)-2 


FBI(19-cv-1495)-1297 


(b)(6)/(bY(7)(C)-3, 55 (b)(7)(E)-2 


FBI(19-cv-1495)-1298 


(b)(3)-25 (b)(G)/(b)(7)(C)-3; (BY(7)(E)-2, 3 


FBI(19-cv-1495)-1299 


w 


(b)(3)-25 (b)(G)/(b)(7)(C)-1, 3; (BY(7Z)(E)-2, 


FBI(19-cv-1495)-1300 thru FBI(19-cv-1495)-1301 


(b)(3)-25 (b)(GY/(b)(7)(C)-3; (BY7)(E)-2, 3 


FBI(19-cv-1495)-1302 thru FBI(19-cv-1495)-1304 


w 


(b)(3)-25 (b)(6)/(b)(7)(C)-3, 5; (bY(7)(E)-2, 


FBI(19-cv-1495)-1305 thru FBI(19-cv-1495)-1306 


(b)(3)-2; (b)(G)/(b)(7)(C)-3; (BY(7)(E)-2, 3 


FBI(19-cv-1495)-1307 


w 


(b)(3)-2; (b)(6)/(b)(7)(C)-3, 5; (BY(7)(E)-2,, 


FBI(19-cv-1495)-1308 thru FBI(19-cv-1495)-1309 


(b)(3)-2; (B)(GY/Cb)(7)(C)-5; (BY(7)(E)-2, 3 


FBI(19-cv-1495)-1310 


w 


(b)(3)-2; (b)(6)Cb)(7)(C)-3, 5; (BY7)\(E)-2, 


FBI(19-cv-1495)-1311 thru FBI(19-cv-1495)-1312 


(b)(3)-2; (b)(G)/(b)(7)(C)-3; (BY7)(E)-2, 3 


FBI(19-cv-1495)-1313 


(b)(3)-2; (B)7V(E)-2, 3 


FBI(19-cv-1495)-1314 


(b)(6)/(B)(7)(C)-3; (b)\(7)(E)-2, 3 


FBI(19-cv-1495)-1315 thru FBI(19-cv-1495)-1318 


(b)(6)/(b)(7)(C)-5; (b)(7(E)-2, 3 


FBI(19-cv-1495)-1319 thru FBI(19-cv-1495)-1320 


(b)(6Vb)7)C)-3, 5; (b)\(7)(E)-2, 3 


FBI(19-cv-1495)-1321 


(b)(6)/(b)(7)(C)-5; (b)(7(E)-2, 3 


FBI(19-cv-1495)-1322 thru FBI(19-cv-1495)-1324 


(b)(3)-25 (b)(6)(b)(7)(C)-3; (b)(7)(E)-2, 3 


FBI(19-cv-1495)-1325 


(b)(6)/(b)(7)(C)-3; (b)(7M(E)-2, 3 


FBI(19-cv-1495)-1326 


(b)\(ME)-2, 3 


FBI(19-cv-1495)-1327 


(b)(6)/(b)(7)(C)-3; (b)(7(E)-2, 3 


FBI(19-cv-1495)-1328 thru FBI(19-cv-1495)-1329 


(b)\(ME)-2, 3 


FBI(19-cv-1495)-1330 


(YG) 7)C)-3; (b)\(E)-2, 3 


FBI(19-cv-1495)-1331 thru FBI(19-cv-1495)-1332 


(YG) 7)C)-1; (b)\E)-2, 3 


FBI(19-cv-1495)-1333 


(b)(6)/(b)(7)(C)-1, 3; (b)(7)(E)-2, 3 


FBI(19-cv-1495)-1334 


(b)(6)/(b)(7)(C)-1; (b)(7M(E)-2, 3 


FBI(19-c-v1495)-1335 


(YG 7)C)-1 3; (b)\(E)-2, 3 


FBI(19-cv-1495)-1336 


(b)(6)/(b)(7)(C)-1, 3, 5; (b)(7)(E)-2, 3 


FBI(19-cv-1495)-1337 
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FBI(19-cv-1495)-1338 thru FBI(19-cv-1495)-1340 


(b)(6)(b)(7)(C)-1; (b)(7M(E)-2, 3 


FBI(19-cv-1495)-1341 


(b)(6)/(b)(7)(C)-3; (b)(7(E)-2, 3 


FBI(19-cv-1495)-1342 thru FBI(19-cv-1495)-1344 


(b)(6)V/(BY(7)C)-3, 5; (b)()(E)-2, 3 


FBI(19-cv-1495)-1345 thru FBI(19-cv-1495)-1347 


(b)(6)/(b)(7)(C)-3; (b)(7M(E)-2, 3 


FBI(19-cv-1495)-1348 thru FBI(19-cv-1495)-1352 


(b)(6)/(BY(7)(C)-3, 55 (b)(7)(E)-2, 3 


FBI(19-cv-1495)-1353 


(b)(6)/(b)(7)(C)-3; (b)(7M(E)-2, 3 


FBI(19-cv-1495)-1354 


(b)(6)/(B)(7)(C)-3, 55 (b)\(7)(E)-2, 3 


FBI(19-cv-1495)-1355 


(b)(3)-5; (b)(6)/(b)(7)(C)-2, 3, 5; (BY(7)\(E)-2, 3 


FBI(19-cv-1495)-1356 


(b)(3)-5; (b)(6)/(b)(7)(C)-2, 5; (BY(7)(E)-2, 3 


FBI(19-cv-1495)-1357 


(b)(3)-5; (b)(6)/(b)(7)(C)-2; (BY(7)(E)-2, 3 


FBI(19-cv-1495)-1358 


(b)(3)-5; (b)(6)/(b)(7)(C)-2, 3; (BY7)(E)-2, 3 


FBI(19-cv-1495)-1359 thru FBI(19-cv-1495)-1362 


(b)(6)/(bY(7)(C)-3, 55 (b)(7)(E)-2, 3 
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(b)(3)-5; (b)(6)/(b)(7)(C)-2, 3; (BY7)(E)-2, 3 


FBI(19-cv-1495)-1364 thru FBI(19-cv-1495)-1365 


(b)(6)/(b)(7)(C)-3; (b)(7(E)-2, 3 


FBI(19-cv-1495)-1367 


(b)(6)/(b)(7)(C)-3; (b)\(7)(E)-2 


FBI(19-cv-1495)-1368 thru FBI(19-cv-1495)-1373 


(b)(6)/(B)(7)(C)-3, 55 (b)\(7)(E)-2 


FBI(19-cv-1495)-1374 


(b)(6)/(b)(7)(C)-3; (b)(7)(E)-2 


FBI(19-cv-1495)-1375 thru FBI(19-cv-1495)-1377 


(b)(6)V/(BY\7)C)-3, 5. 


FBI(19-cv-1495)-1378 


(b)(6)/(b)(7)(C)-3; (b)(7)(E)-2 


FBI(19-cv-1495)-1379 


(b)(3)-1; )G)/b)7)(C)-1, 5 


FBI(19-cv-1495)-1381 


(b)(3)-1; ()G)/b)(7)(C)-3, 5 


FBI(19-cv-1495)-1382 


(b)(3)-1; ()G)/Cb)(7)(C)-3 


FBI(19-cv-1495)-1385 


(b)(6)/(b)(7)(C)-3; (b)(7)(E)-2 


FBI(19-cv-1495)-1386 thru FBI(19-cv-1495)-1387 


(b)(6)/(bY(7)(C)-3, 5; (b)(7)(E)-2 


FBI(19-cv-1495)-1388 thru FBI(19-cv-1495)-1389 


(b)(6)/(b)(7)(C)-3; (b)(7)(E)-2 


FBI(19-cv-1495)-1390 thru FBI(19-cv-1495)-1394 


(b)(6)/(B)(7)(C)-3, 5; (b)(7)(E)-2 


FBI(19-cv-1495)-1395 thru FBI(19-cv-1495)-1399 


(b)(6)V/(BY7)C)-3 


FBI(19-cv-1495)-1400 


ua 


(b)(6)/(b\(7)C)-3, 


FBI(19-cv-1495)-1401 thru FBI(19-c-v1495)-1402 


(b)(6)V/(Y(7)C)-3 


FBI(19-cv-1495)-1403 thru FBI(19-cv-1495)-1404 


ua 


(b)(6)/(BY(7)C)-3, 


FBI(19-cv-1495)-1405 


(b)(6)/(b)(7)(C)-3; (b)(7)(E)-2 


FBI(19-cv-1495)-1406 


(b)(3)-2; (b)(G)/(b)(7)(C)-3; (BY7)(E)-2, 3 


FBI(19-cv-1495)-1407 


(b)\(ME)-2, 3 


FBI(19-cv-1495)-1409 


(b)(6)/(b)(7)(C)-3; (b)(7)(E)-2 


FBI(19-cv-1495)-1410 thru FBI(19-cv-1495)-1418 


(b)(6)/(BY(7)C)-3, 55 (b)\(7)(E)-2 


FBI(19-cv-1495)-1419 


(b)(3)-1; )GY/b)7)(C)-1, 5 


FBI(19-cv-1495)-1420 


(b)(B)-1; ()G)b)(7)(C)-1, 4 


FBI(19-cv-1495)-1421 


(b)(3)-1; ()GY/b)(7)(C)-3 


FBI(19-cv-1495)-1422 


(b)(3)-1 


FBI(19-cv-1495)-1423 


(b)(6)/(b)(7)(C)-3; (b)(7)(E)-2 


FBI(19-cv-1495)-1424 thru FBI(19-cv-1495)-1435 


(b)(6)/(b)(7)(C)-3, 5; (b)(7)(E)-2 


FBI(19-cv-1495)-1436 


FBI(19-cv-1495)-585 


FBI(19-cv-1495)-1437 


(b)(3)-1; )G)/b)(7)(C)-3 


FBI(19-cv-1495)-1438 thru FBI(19-cv-1495)-1443 


(b)(6)V/(BY(7)C)-3, 55 (b)(7)(E)-2 


FBI(19-cv-1495)-1444 thru FBI(19-cv-1495)-1445 


ua 


(b)(6)V/(\7)C)-3, 


FBI(19-cv-1495)-1446 


(b)(6)V/Y7)C)-3 


FBI(19-cv-1495)-1447 


(b)(6)/(BY(7)(C)-3, 55 (b)(7)(E)-2 


FBI(19-cv-1495)-1449 


(b)(6)V/(Y\7)C)-3 


FBI(19-cv-1495)-1450 


uw 
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FBI(19-cv-1495)-1451 
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uw 
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FBI(19-cv-1495)-1453 thru FBI(19-cv-1495)-1455 
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FBI(19-cv-1495)-1456 thru FBI(19-cv-1495)-1465 


(b)(6)/(b)(7)(C)-3; (b)(7)(E)-2 


FBI(19-cv-1495)-1467 thru FBI(19-cv-1495)-1468 


(b)(6)/(b)(7)(C)-3, 5; (b)(7)(E)-2 


FBI(19-cv-1495)-1469 


(b)(6)V/(Y\7)C)-3 


FBI(19-cv-1495)-1471 


(Y(GVb\7C)-3, 5 


FBI(19-cv-1495)-1472 thru FBI(19-cv-1495)-1474 


(b)(6)/(Y7)C)-3 


FBI(19-cv-1495)-1475 


(b)(6)/(b)(7)(C)-3; (b)(7)(E)-2 


FBI(19-cv-1495)-1476 


(b)(6)/(BY(7)(C)-3, 55 (b)(7)(E)-2 


FBI(19-cv-1495)-1477 thru FBI(19-cv-1495)-1479 


(b)(3)-1; ()G)/Cb)(7)(C)-3 


FBI(19-cv-1495)-1480 thru FBI(19-cv-1495)-1504 


(b)(6)/(b)(7)(C)-3; (b)\(7)(E)-2 


FBI(19-cv-1495)-1506 


(b)(6)/(b)(7)(C)-3; (b)\(7)(E)-2 


FBI(19-cv-1495)-1507 thru FBI(19-cv-1495)-1510 


(b)(6)/(b)(7)(C)-3, 55 (b)\()(E)-2 


FBI(19-cv-1495)-1511 


(b)(6)/(b)(7)(C)-3; (b)\(7)(E)-2 


FBI(19-cv-1495)-1512 


(b)(6)/(BY(7)(C)-3, 55 (b)\(7)(E)-2 


FBI(19-cv-1495)-1513 thru FBI(19-cv-1495)-1514 


(b)(6)/(b)(7)(C)-3; (b)\(7)(E)-2 


FBI(19-cv-1495)-1515 thru FBI(19-cv-1495)-1516 


(b)(6)V/(BY(7)(C)-3, 5; (b)(7)(E)-2 


FBI(19-cv-1495)-1517 


(b)(6)/(b)(7)(C)-3; (b)(7)(E)-2 


FBI(19-cv-1495)-1518 thru FBI(19-cv-1495)-1519 


(b)(6)V/(Y(7)C)-3 


FBI(19-cv-1495)-1520 thru FBI(19-cv-1495)-1521 


(b)(6)/(B)\(7)(C)-3, 5 


FBI(19-cv-1495)-1522 thru FBI(19-cv-1495)-1531 


(b)(6)/(b)(7)(C)-3; (b)(7)(E)-2 


FBI(19-cv-1495)-1533 


(b)(6)/(BY(7)C)-3 


FBI(19-cv-1495)-1534 


(b)(6)/(b)(7)(C)-3; (b)\(7)(E)-2 


FBI(19-cv-1495)-1535 thru FBI(19-cv-1495)-1536 


(YG 7)C)-3 


FBI(19-cv-1495)-1537 thru FBI(19-cv-1495)-1538 


(b)(6V(Y7)C)-3, 5. 


FBI(19-cv-1495)-1539 


(b)(6)/(Y7)C)-3 


FBI(19-cv-1495)-1540 thru FBI(19-cv-1495)-1541 


(b)(6)V/(Y\7)C)-3, 5 


FBI(19-cv-1495)-1542 thru FBI(19-cv-1495)-1559 


(b)(3)-1; (B)GY/Cb)(7)(C)-3 


FBI(19-cv-1495)-1561 thru FBI(19-cv-1495)-1569 


ua 


(b)(6)/(b)(7)(C)-3, 


FBI(19-cv-1495)-1570 thru FBI(19-cv-1495)-1571 


(b)(6)/(BY7)(C)-3 


FBI(19-cv-1495)-1572 


ua 


(b)(6)/(bY(7)(C)-3, 


FBI(19-cv-1495)-1573 thru FBI(19-cv-1495)-1574 


(b)(6)/(BY(7)(C)-3, 55 (b)(7)(E)-2 


FBI(19-cv-1495)-1575 thru FBI(19-cv-1495)-1577 


ua 


(b)(6)/(bY7)C)-3, 


FBI(19-cv-1495)-1578 thru FBI(19-cv-1495)-1580 


(b)(6)/(b)(7)(C)-3; (b)\(7)(E)-2 


FBI(19-cv-1495)-1581 


ua 


(b)(6)/(bY(7)(C)-3, 


FBI(19-cv-1495)-1583 thru FBI(19-cv-1495)-1590 


(b)(6)V/(BY(7)C)-3 


FBI(19-cv-1495)-1591 thru FBI(19-cv-1495)-1606 


(b)(6)/(b)(7)(C)-3; (b)\(7)(E)-2 
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Business Address: 


Business: 
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1 FBI(19-cv-1495)-1233 
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Home: 


E-mail: 
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Grand cad ‘Subpocar 0612, 


ene —— oe me 


Munited Sintes District Court 


Southern Districr or New York 


b3 -1 
TO: 


GREETINGS: 
WE COMMAND YOU thatall and singutar business and excuses being iaid aside, you appear and attend 
before the GRAND JURY of the people of the United States for the Southern District of New York, at the 


United States Courthouse, Foley Square (40 Centre Strect), Roam 209, in the Borough of Mankaran, City 
of New York, New York, in the Southern District of New York, at the following date and time: 


to testify and give evidence in regard to ar alleged vielation oft 
Title 18. United States Code, Suction 1030 


and not to depart the Grand Jury without igave thereof, or of the United States Atomey, and that you 
bring with you and produce at the above time and place the following: 


E ATTACHED RIDER 


NB: Personal appearance is not required if 2 ts are delivered or made available 

on or before the return date to Special Agen: ‘ederal Bureau of Investigation, 26 b6 -1,4 

FEDEGAL PCAZA, Erie Y AZ)? BEA Geo. b7c -1,4 
b3 -1 


Failure to attend and produce any items hereby demanded wil] canstitute contempt of court and will 
subject you to civil sanctions and criminal penaltics, in addition to other penalties of the Law. 
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United Stctes Artarney-for tha a3) 
Southern District of New York 
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* Used Lexis/Nexus ecco! | 
SSN: 

DOB; 
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Last Name: 
First Name: 
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